Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via...
CVE-2026-108978
Heap-based buffer overflow vulnerability in Samsung Opensource rlottie allows Buffer Overflow via Environment Variables.
#advisory
共收录 23075 条相关情报。
← 返回所有主题A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown...
CVE-2026-108769
A security flaw has been discovered in zhayujie CowAgent up to 2.2.0. This affects an unknown part of the file Markdown.
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in...
CVE-2026-108925
Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Cohesity NetBackup Admini
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename...
CVE-2026-108976
GNU Emacs before 31.2 (and TRAMP through 2.8.2) allows OS command injection via a filename because tramp-user-regexp has
databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g.,...
CVE-2026-108963
databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a data
A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the...
CVE-2026-108768
A vulnerability was identified in zhayujie CowAgent up to 2.2.0. Affected by this issue is the function json.loads of th
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because...
CVE-2026-108913
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into
Improper neutralization of special elements used in an SQL command ('SQL injection')...
CVE-2026-59508
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Interuse i-Bos. T
Several Postiz endpoints return the complete database row of the record they operate on instead...
CVE-2026-107761
Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the c
Bluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedure
CVE-2026-19740
The Link Layer Control Procedure (LLCP) implementation of the Zephyr software Bluetooth LE Controller retains the receiv
Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: RX work item is not cancelled on channel teardown
CVE-2026-19935
The Bluetooth LE host queues received L2CAP connection-oriented channel (CoC) data for deferred processing through a str
NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction
CVE-2026-19737
i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DI
Out-of-bounds read when the zbus proxy agent IPC backend logs a rejected peer frame's channel name
CVE-2026-18418
The zbus proxy agent IPC backend in subsys/zbus/proxy_agent/zbus_proxy_agent_ipc.c logged the channel name of a rejected
Out-of-bounds write in the NXP MCUX TRNG entropy driver for non-word-multiple request lengths
CVE-2026-19736
The NXP MCUX TRNG entropy driver in drivers/entropy/entropy_mcux_trng.c passed the caller's byte count straight to the v
Predictable TCP initial sequence numbers when the RFC 6528 secret key generation fails silently in the Zephyr TCP stack
CVE-2026-19735
The RFC 6528 initial-sequence-number implementation in subsys/net/ip/tcp.c derived every TCP ISN from SHA-256(unique_key
Stack out-of-bounds write in the Goodix GT911 touch controller driver from an unvalidated device-reported touch point count
CVE-2026-19576
The Goodix GT9xx input driver in drivers/input/input_gt911.c reads the touch point count from the controller's status re
CVE-2026-108913
CVE-2026-108913
omarchy-theme-set in Omarchy 4 before 4.0.1 allows code execution via a third-party theme because the files placed into
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108888
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysDepartRoleController exportXls handler
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the...
CVE-2026-108887
JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the SysCommentController exportXls handler tha
pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that...
CVE-2026-108903
pH7Builder (pH7 Social Dating CMS) before 19.3.0 contains a CAPTCHA bypass vulnerability that allows unauthenticated att