i2c: stub: Reject I2C block transfers with invalid length
CVE-2026-64191
In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid
#advisory
共收录 23779 条相关情报。
← 返回所有主题net: team: fix NULL pointer dereference in team_xmit during mode change
CVE-2026-64190
In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in team_xmi
netfilter: ipset: fix race between dump and ip_set_list resize
CVE-2026-64189
In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix race between dump and ip_set_
net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
CVE-2026-64188
In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free i
xfs: fail recovery on a committed log item with no regions
CVE-2026-64187
In the Linux kernel, the following vulnerability has been resolved: xfs: fail recovery on a committed log item with no
Piwigo RCE via PHP Code Injection into Config File in Installer
CVE-2026-35048
The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configuration and writes them d
EnvironmentManager.restore() backup ID path traversal copies arbitrary directories into environment data
CVE-2026-58413
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.restore(env, b
Possible heap-based buffer overflow when decoding TIFF image containing well-crafted tile
CVE-2026-35591
libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before an
Network-AI has an an OS Command Injection issue
CVE-2026-54051
Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.9.1, the agent sandbox gates shell comma
Possible out-of-bounds read leading to crash when decoding well-crafted EXIF metadata
CVE-2026-35590
libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and in
Possible integer overflow on 32-bit systems when reading GIF images
CVE-2026-33328
libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.1
Possible integer overflow leading to potential heap-based buffer overflow
CVE-2026-33327
libvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and includ
Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory
CVE-2026-46671
Rust OneNote File Parser is a parser for Microsoft OneNote files implemented in Rust. Prior to version 1.1.1, a maliciou
HeyForm has unauthenticated /api/upload endpoint that accepts arbitrary files with no auth/session/form context
CVE-2026-63429
HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `POST /api/upload` has no authentication guard, no
HeyForm: completeSubmission persists submitter-supplied hidden fields verbatim without validating against the form's declared hidden-field set
CVE-2026-63428
HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `completeSubmission` accepts a `hiddenFields: [{id,
HeyForm vulnerable to stored XSS via form field titles
CVE-2026-35198
HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, a stored cross-site scripting (XSS) vulnerability i
HeyForm Vulnerable to Stored XSS via Unauthenticated SVG File Upload
CVE-2026-45797
HeyForm is an open-source form builder. Prior to version 3.0.0-rc.7, the `/api/upload` endpoint allows unauthenticated f
lettre has TLS hostname verification disabled when using Boring TLS backend
CVE-2026-46428
lettre is a a mailer library for Rust. Starting in version 0.10.1 and prior to version 0.11.22, an inverted-boolean bug
Wazuh cluster DAPI arbitrary callable deserialization and RBAC context injection allow a cluster peer to execute privileged functions on the master node
CVE-2026-28220
Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.14.5, i
Caddy Defender trusted proxy client IP bypass
CVE-2026-46415
The Caddy Defender plugin is a middleware for Caddy that allows users to block or manipulate requests based on the clien