FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect...
CVE-2026-65706
FFmpeg versions 3.0 through 8.1.2 contain an out-of-bounds write vulnerability in the vf_swaprect video filter that allo
#advisory
共收录 23779 条相关情报。
← 返回所有主题Deserialization of untrusted data vulnerability in Johnson Control victor on Windows allows capec...
CVE-2026-21655
Deserialization of untrusted data vulnerability in Johnson Control victor on Windows allows capec-586. This issue affec
Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue...
CVE-2026-34496
Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before
Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads...
CVE-2026-63765
Chatwoot before 4.16.0 contains an authentication bypass vulnerability in the direct uploads controller that allows unau
Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit...
CVE-2026-15966
Permissive cross-domain security policy with untrusted domains vulnerability in Progress MOVEit Transfer. This issue af
gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in...
CVE-2026-60122
gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility tha
FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause...
CVE-2026-65704
FFmpeg through 8.1.2 contains an out-of-bounds write vulnerability that allows attackers to cause heap corruption by sup
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate...
CVE-2026-38764
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kerne
Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in...
CVE-2026-65010
Datasets through 5.00, fixed in commit ad2d853, contains a symlink-following vulnerability in Extractor.extract() that a
Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit...
CVE-2026-10697
Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5,
The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions...
CVE-2026-15212
The WPO365 | Login plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 43
A security issue was discovered in the Kubernetes Java client library where a compromised pod may...
CVE-2026-15687
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new
Ruby json: JSON generator heap buffer overflow when streaming to an IO
CVE-2026-54696
### Summary `JSON.dump(obj, io)` and `JSON::State#generate(obj, io)` can write past the internal JSON generator buffer
c3p0 can, in combination with other libraries, compose to a "sink" for deserialization gadgets
CVE-2026-55223
### Impact The JDBC spec defines the interface `DataSource`, with a method called `getConnection()`, and `ConnectionPoo
React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)
CVE-2026-53669
This is a follow up to [CVE-2025-68470](https://github.com/remix-run/react-router/security/advisories/GHSA-9jcx-v3wj-wh4
React Router: Open redirect leading to XSS
CVE-2026-53668
Applications with open redirects could permit attacker crafted links to result in redirects to unexpected external locat
React Router: RSCErrorHandler Missing Protocol Validation (XSS)
CVE-2026-53667
This is a follow up to https://github.com/remix-run/react-router/security/advisories/GHSA-8646-j5j9-6r62. React Router
React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration
CVE-2026-53666
If application code allows attacker supplied input to overwrite certain aspects of errors caught by the SSR process, the
ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged
CVE-2026-53467
In the MNG decoder there is a possible heap information disclosure because part of the pixels are left unchanged.
find-my-way: DDoS with HTTP2
CVE-2026-47219
### Impact Remotely triggerable DoS in find-my-way when it is used with Node's HTTP/2 server. The short version is that