CVE-2026-90782

S2OPC through 1.7.3 contains a null pointer dereference in the function msg_subscription_publish_bs__alloc_notification_message_items(). The root cause is that a failed heap allocation for a DataChangeNotification is overwritten by a subsequent successful allocation for an EventNotificationList ,...

CVE-2026-90781

alsa-lib through 1.2.16.1 contains an off-by-one stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function (in ctlparse.c). When parsing a name= field with 64 or more characters, the function writes one byte past a 64-byte stack buffer, overwriting adjacent stack memory and potentiall...

CVE-2026-90519

PHPGurukul Bank Locker Management System 1.0 is affected by an unrestricted file upload vulnerability in the file /blms/banker/add-locker-form.php, specifically through manipulation of the addressproof argument. A remote attacker with low privileges (e.g., a banker-level account) can exploit this...

CVE-2026-90518

A vulnerability in PHPGurukul Bank Locker Management System 1.0 allows remote attackers with low privileges to manipulate the UserType argument in sidebar.php , leading to improper access controls . The flaw permits unauthorized access to sensitive functions of the system, resulting in low impact...

CVE-2026-90517

PHPGurukul Bank Locker Management System 1.0 contains an authorization bypass vulnerability in the file /blms/view-assign-locker.php. An unauthenticated remote attacker can manipulate the ltid argument to bypass authorization controls, resulting in a partial confidentiality impact (CVSS 3.1 base ...

CVE-2026-90780

SIPp through 3.7.7 contains a buffer overflow in the get_header() function within src/sip_parser.cpp. When processing SIP messages whose header content exceeds 20,490 bytes , an unauthenticated remote attacker can overflow a static buffer and crash the process , resulting in denial of service. Th...

CVE-2026-90779

SIPp through version 3.7.7 is affected by a stack buffer overflow in the createAuthHeader() function. The vulnerability is triggered when processing SIP authentication challenges (HTTP 401 or 407) containing oversized algorithm parameters , allowing a malicious SIP server to corrupt the stack and...

CVE-2026-90778

SIPp through 3.7.7 is vulnerable to a buffer overflow in the get_peer_tag() function when processing SIP To headers containing tag parameters of 2049 bytes or more . Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow a static buffer and crash ...

CVE-2026-90777

ESPnet before v.202609 deserializes pretrained model checkpoints using torch.load with weights_only=False, enabling arbitrary code execution from attacker-supplied files. The vulnerable code path is triggered when a malicious checkpoint file is loaded through the model initialization or fine-tuni...

CVE-2026-90776

Nodemailer versions 9.1.0 through 10.0.4 are affected by a quadratic time complexity flaw in the addressparser component. When parsing email addresses containing RFC 5322 comments (comment-separated atoms), the parser consumes excessive CPU and blocks the Node.js event loop for several seconds, r...

CVE-2026-90516

SourceCodester School Registration and Fee System 1.0 is affected by a remote SQL injection vulnerability in the period parameter of /bilal/normal/pay_report.php. No authentication is required, and the attack complexity is low. The CVSS 3.1 score is 7.3 (HIGH) , with low impacts to confidentialit...

CVE-2026-90515

A SQL injection vulnerability exists in SourceCodester School Registration and Fee System 1.0 , specifically in the file /bilal/normal/delete_stud.php. Manipulating the selector[] parameter allows a remote, unauthenticated attacker to inject SQL, with low impact on confidentiality, integrity, and...

CVE-2026-90775

PostGIS address_standardizer versions through 3.7.0 fail to validate the Weight parameter from caller-supplied rules tables before using it as an array index in the load_value array. Attackers with low privileges can craft malicious rule rows with out-of-range Weight values, triggering an out-of-...

CVE-2026-90514

SourceCodester School Registration and Fee System 1.0 is vulnerable to SQL injection via the Status argument in the file /bilal/normal/save_stud.php (function unspecified). The attack is remote and requires no authentication , rated CVSS 3.1: 7.3 (HIGH) with low impact on confidentiality, integri...

CVE-2026-90774

rustypaste before 0.18.1 is vulnerable to a path traversal via the optional custom filename HTTP header. The root cause is that the destination path is validated before the filename header is applied, so an attacker can supply traversal sequences (e.g., ../) in the header to write files outside t...

CVE-2026-90772

Amundsen frontend through 4.3.0 is affected by a stored XSS in ResourceListItem components (e.g., TableListItem), which render table, dashboard, and feature descriptions using dangerouslySetInnerHTML without HTML sanitization. An attacker with low privileges can inject malicious markup (such as )...

CVE-2026-90773

procs through 0.14.12 is vulnerable to terminal escape sequence injection via its Command column. The tool fails to sanitize ANSI or OSC escape sequences embedded in process command-line arguments before rendering them, allowing a local attacker with low privileges to craft a process whose comman...

CVE-2026-90771

joi (the Hapi.js validation library) before versions 17.13.8 and 18.2.9 is affected by a prototype pollution vulnerability in the messages compilation function . The root cause is that the function accepts __proto__ as a valid error code, allowing an attacker to supply __proto__ keys in custom er...

CVE-2026-90770

Spug through 3.4.0 contains a remote code execution vulnerability in the ping_check function (located in the monitor app). The root cause is that user-supplied monitor addresses are interpolated directly into shell commands without validation , allowing authenticated users with monitor permission...

CVE-2026-90769

Open Notebook before 1.11.0 contains a Server-Side Request Forgery (SSRF) vulnerability in the POST /api/sources endpoint. The application fails to validate the URL parameter, allowing any authenticated user to supply arbitrary URLs that the server will fetch directly. This enables attackers to r...