Search CVE reports

(PostGIS address_standardizer through 3.7.0 fails to validate the Weigh ...)

(procs through 0.14.12 fails to sanitize escape sequences in process co ...)

An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured with a QUIC bind listener, and the affected...

wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a "table flip" attack. It does not check the return value of calloc()...

In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the host, which can be escalated to arbitrary code execution on the host, a different vulnerability than CVE-2026-76925....

(A flaw has been found in GPAC up to f1219cde. Affected by this issue i ...)

(A vulnerability was detected in GPAC up to f1219cde. Affected by this ...)

(A security vulnerability has been detected in GPAC up to f1219cde. Aff ...)

(A vulnerability was identified in GPAC up to f1219cde. The impacted el ...)

zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length arguments are never validated against the dictionary array bounds. Attackers can...