A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto()...
CVE-2026-14935
A logic vulnerability was found in GStreamer's webrtcbin component. The _check_sdp_crypto() function contains an inverte
#severity:low
共收录 1585 条相关情报。
← 返回所有主题An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `UpdateCacheMiddleware`...
CVE-2026-48588
An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `UpdateCacheMiddleware` and the `cache_page()`
cut: -s ignored in -z -d '' newline-delimiter mode
CVE-2026-35381
`cut` routes `-z -d ''` through a special newline-delimiter path that ignores the `-s` only-delimited flag, emitting who
mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)
CVE-2026-35361
uutils calls `mknod` *before* setting the SELinux context (GNU uses `setfscreatecon` first, labeling atomically). If `se
Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)
CVE-2026-55630
## Summary In Kiwi TCMS the fields `TestCase.extra_link` and `TestPlan.extra_link` were meant to represent URLs to exte
Linuxfabrik Monitoring Plugins allow insecure creation of SQLite databases
CVE-2026-53759
### Summary The SQLite databases are created at predictable (static) paths in `/tmp`. Any user can therefore create a sy
uucore: safe_traversal TOCTOU protection only enabled on Linux
CVE-2026-35362
The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use (TOCTOU) s
mkdir: -m exposes directory with umask perms before chmod (race window)
CVE-2026-35353
The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory wit
id: pretty-print uses effective GID instead of effective UID for name lookup
CVE-2026-35371
The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effect
cut: -s (only-delimited) ignored when delimiter is a newline
CVE-2026-35343
The cut utility in uutils coreutils incorrectly handles the -s (only-delimited) option when a newline character is speci
ln: rejects non-UTF-8 source filenames in target-directory mode
CVE-2026-35373
In target-directory forms (`ln SOURCE... DIRECTORY`), `ln` rejects source paths with non-UTF-8 filename bytes, while GNU
comm: lossy UTF-8 conversion silently corrupts non-UTF-8 output
CVE-2026-35346
The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines. Th
mktemp: empty TMPDIR creates temp files in CWD instead of /tmp
CVE-2026-35342
The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp,
A weakness has been identified in crater-invoice-inc crater up to 6.0.6. This affects the...
CVE-2026-14791
A weakness has been identified in crater-invoice-inc crater up to 6.0.6. This affects the function getFormattedString of
A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file...
CVE-2026-14790
A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.
A vulnerability was detected in radareorg radare2 up to 6.1.6. Affected by this issue is some...
CVE-2026-14789
A vulnerability was detected in radareorg radare2 up to 6.1.6. Affected by this issue is some unknown functionality of t
A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this...
CVE-2026-14788
A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this vulnerability is the funct
A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function...
CVE-2026-14787
A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/
A security flaw has been discovered in radareorg radare2 up to 6.1.6. This impacts the function...
CVE-2026-14786
A security flaw has been discovered in radareorg radare2 up to 6.1.6. This impacts the function r_str_word_get0set of th
A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1...
CVE-2026-14775
A vulnerability was identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected is an unkn