CVEs published June 28, 2026
77,396 CVEs in 2026
Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's container.options string to the Docker job container's HostConfig and, when configured with privileged: false, forces only…
The Joomla extension JoomCCK exposes a front-end controller task, that builds two SQL statements by directly concatenating a user-supplied request parameter into the query string without escaping or…
Zephyr's IP socket recvmsg() implementation (subsys/net/lib/sockets/sockets_inet.c, insert_pktinfo()) validated the user-supplied ancillary (msg_control) buffer using only the payload length…
FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than…
The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions up to and including 23.6.
RustDesk gates incoming control messages on per-capability flags rather than on the session's authorized connection type, and a file-transfer session does not clear those flags.
Zephyr's BSD-sockets getaddrinfo() implementation (subsys/net/lib/sockets/getaddrinfo.c) passes a pointer to a stack-allocated state object (struct getaddrinfo_state ai_state) as the user_data of an…
A weakness has been identified in antlr ANTLR4 up to 4.13.2.
A vulnerability was identified in yashpokharna2555 restaurent-management-system.
A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0/7.php.
A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0.
A vulnerability was determined in SourceCodester Class and Exam Timetabling System 1.0/6.php.
A vulnerability was found in SourceCodester Class and Exam Timetabling System 1.0.
libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation num_attrs * sizeof(libssh2_publickey_attribute) without bounds…
Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length…
libssh2 through 1.11.1 grows its publickey list with SSH2_REALLOC but does not zero-initialize new entries before parsing populates them, so a parse failure reaching the cleanup path leaves…
The Zephyr Bluetooth LE Audio Basic Audio Profile (BAP) unicast client mishandles peer-supplied ASE state notifications.
A vulnerability was identified in Databend up to 1.2.881 on HTTP.
A vulnerability has been found in RAGapp up to 0.1.5.
A vulnerability was determined in itsourcecode Hospital Management System 1.0.
A vulnerability was found in itsourcecode Hospital Management System 1.0.
A flaw has been found in khoj-ai khoj up to 2.0.0-beta.28.
nghttp2's nghttpx proxy through 1.69.0 forwards an HTTP/1.1 Upgrade request that also carries a Content-Length header and body onto reusable keep-alive backend connections, re-adding the Upgrade and…
A vulnerability was detected in antlr ANTLR4 up to 4.13.2.
A security vulnerability has been detected in antlr ANTLR4 up to 4.13.2.
Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist using a case-sensitive comparison, so on Windows, where environment names are case-insensitive, supplying…
A vulnerability was detected in volcengine OpenViking up to 0.3.21.
A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7.
A vulnerability has been found in itsourcecode Hospital Management System 1.0.
A flaw has been found in antlr ANTLR4 up to 4.13.2.
A security flaw has been discovered in yashpokharna2555 restaurent-management-system.
The Microchip SERCOM-G1 UART driver (drivers/serial/uart_mchp_sercom_g1.c), used by the PIC32CM-JH SoC family, contains an out-of-bounds write in its asynchronous (DMA) receive path.
A vulnerability was found in SimStudioAI sim up to 0.6.92.
A vulnerability was detected in 78 xiaozhi-esp32 up to 2.2.6.
A security vulnerability has been detected in glpi-project glpi 11.0.5/11.0.6/11.0.7.
A vulnerability was detected in skypilot-org skypilot up to 0.12.0.
A vulnerability has been found in code-projects Project Management System 1.0.
7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact…
A vulnerability was determined in VoltAgent up to 2.1.17.
A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28.
A weakness has been identified in 78 xiaozhi-esp32 up to 2.2.6.
A flaw has been found in arc53 DocsGPT up to 0.18.0.