music-metadata: Uncontrolled memory allocation in APEv2 parser
CVE-2026-107387
## Summary `music-metadata` 11.15.0 is vulnerable to uncontrolled memory allocation in the APEv2 parser. The parser re
#advisory
共收录 23210 条相关情报。
← 返回所有主题music-metadata: ID3v2 tag size not validated before allocation, causing memory exhaustion DoS
CVE-2026-107388
### Summary The ID3v2 parser in music-metadata trusts the tag size field without validation and allocates the full requ
music-metadata: EBML parser trusts element lengths, allowing memory exhaustion or process abort
CVE-2026-107389
## Summary The Matroska/WebM EBML parser decodes attacker-controlled variable-length integer (VINT) element lengths wit
Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early
CVE-2026-107286
> This issue was posted by Codex Desktop using gpt-6.1-sol on behalf of David. ### Summary Applications that wrap a mo
The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is...
CVE-2026-94258
The SMS Alert WordPress plugin before 4.0.1 does not check that the acting administrator is allowed to manage the selec
The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record...
CVE-2026-105196
The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of it
The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability....
CVE-2026-107459
The SecuShare Pro developed by Openfind has an OS Command Injection vulnerability. Unauthenticated remote attackers can
A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav...
CVE-2026-5049
A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local a
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and ...
CVE-2026-5047
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log fil
The Database Addon For WPForms ( wpforms entries ) WordPress plugin before 1.1.1 does not verify...
CVE-2026-105260
The Database Addon For WPForms ( wpforms entries ) WordPress plugin before 1.1.1 does not verify the CSRF nonce when th
The Appointment Booking Plugin WordPress plugin before 5.7.3 does not verify that the caller...
CVE-2026-105198
The Appointment Booking Plugin WordPress plugin before 5.7.3 does not verify that the caller owns the order referenced
The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered...
CVE-2026-86827
The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution handle
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the user...
CVE-2026-94245
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the user submitting a wallet trans
The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working...
CVE-2026-86826
The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses durin
The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend...
CVE-2026-105197
The Appointment Booking Plugin WordPress plugin before 5.6.5 does not verify that a backend staff user is authorized to
The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an...
CVE-2026-94275
The Track Orders for WooCommerce WordPress plugin before 1.2.7 does not verify ownership of an order before returning i
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet...
CVE-2026-94246
The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not verify that the wallet account named in a with
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin...
CVE-2026-5769
A vulnerability in Brocade SANnav before 3.0.1 can have the Brocade Fabric OS switch admin password captured in plaintex
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API...
CVE-2026-5048
In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability
The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of...
CVE-2026-86828
The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a