rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or...
CVE-2026-18313
rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received fro
#severity:medium
共收录 5482 条相关情报。
← 返回所有主题libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack...
CVE-2026-31912
libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instructio
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server...
CVE-2026-18238
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its heade
libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to...
CVE-2026-6554
libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via bac
Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that...
CVE-2026-86197
Grav before 2.0.20 contains a cross-site scripting vulnerability in the Twig sandbox policy that allowlists addJs and ad
AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing...
CVE-2026-86188
AVideo with YPTSocket plugin enabled contains a cross-site scripting vulnerability allowing unauthenticated attackers to
Grav Form Plugin before 9.1.22 fails to verify page authorization when resolving forms by name...
CVE-2026-86194
Grav Form Plugin before 9.1.22 fails to verify page authorization when resolving forms by name across pages, allowing an
SiYuan versions before v3.8.2 contain an information disclosure vulnerability in the...
CVE-2026-86191
SiYuan versions before v3.8.2 contain an information disclosure vulnerability in the getAttributeViewKeysByID endpoint t
AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing...
CVE-2026-86186
AVideo API fails to enforce rate limits when clients send a bot User-Agent header, allowing attackers to bypass all eigh
CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function...
CVE-2025-15647
CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd() function when constraint edge in
ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when...
CVE-2025-15614
ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z arc
The Ninja Forms - Save Progress plugin for WordPress is vulnerable to Missing Authorization in...
CVE-2026-15550
The Ninja Forms - Save Progress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and inclu
NetBox through 4.7.0 fails to properly scope user-private records in REST and GraphQL API...
CVE-2026-86176
NetBox through 4.7.0 fails to properly scope user-private records in REST and GraphQL API endpoints for Notifications, S
Plane through 1.4.2 fails to validate that issues belong to the deploy board's project in the...
CVE-2026-86174
Plane through 1.4.2 fails to validate that issues belong to the deploy board's project in the public comment endpoint. A
Pixelfed through 0.12.9 fails to validate follower status in StoryComposeController react and...
CVE-2026-86178
Pixelfed through 0.12.9 fails to validate follower status in StoryComposeController react and comment endpoints, allowin
The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 -...
CVE-2026-12843
The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. This is due to
Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing...
CVE-2026-86122
Rowboat through 0.9.1 fails to validate custom MCP server and webhook URLs, allowing authenticated users to configure ar
APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in...
CVE-2026-86120
APITable through 1.13.0-beta.1 contains an incorrect authorization vulnerability in NodePermissionGuard that fails to en
gonic versions before 0.22.0 fail to validate administrator privileges in the startScan endpoint,...
CVE-2026-86118
gonic versions before 0.22.0 fail to validate administrator privileges in the startScan endpoint, allowing any authentic
Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without...
CVE-2026-86115
Sim before 0.8.14 classifies tool requests as internal based on URL prefix matching without scheme normalization, skippi