Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in...
CVE-2026-116741
Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whole_bytes() in libspee
#severity:high
共收录 5396 条相关情报。
← 返回所有主题VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows...
CVE-2026-116738
VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to trig
libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query()...
CVE-2026-116740
libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote atta
FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that...
CVE-2026-116724
FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel
FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image:...
CVE-2026-116723
FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows attacke
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlled image bytes to Pillow through Image.open(BytesIO(data...
CVE-2026-115915
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-control
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place forged shared-memory address and monotonic_id values in pub...
CVE-2026-115912
vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place fo
YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL...
CVE-2026-116207
YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability
YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in...
CVE-2026-116208
YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts tha
YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action ...
CVE-2026-116204
YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action (tools/security/actions/de
YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where...
CVE-2026-116211
YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche fiel
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to...
CVE-2026-116201
Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions
Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(),...
CVE-2026-116200
Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to
Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the...
CVE-2026-116194
Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud backend's localhost O
rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate...
CVE-2026-116189
rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums fro
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows...
CVE-2026-116192
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attacker
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows...
CVE-2026-116191
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to wr
Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink...
CVE-2026-116195
Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink function, which trims
vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm...
CVE-2026-116180
vLLM from 0.8.5 before 0.31.0 has a denial of service flaw. LogprobsTensors.empty_cpu() in vllm/v1/outputs.py allocates
phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows...
CVE-2026-116183
phpMyFAQ before 4.1.10 contains an object-level authorization bypass vulnerability that allows unauthenticated attackers