CVE-2026-115508
— Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields
Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded regular expressions …
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-115507
— Vikunja 2.2.0 before 2.7.1 HTML Injection via Notification Email Header
Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/mail.go that interpolates display names and task and project titles raw into ema…
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-115506
— libexpat through 2.9.0 Denial of Service via Billion Laughs Detection Delay
libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late. Attackers can sup…
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-115505
— libsmb2 before 6.3 Integer Overflow in DCE/RPC NDR Decoder via NetrShareEnum
libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or machine-in-the-middle…
Remote
|
Memory Corruption
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-115504
— CFITSIO through 4.7.0 Out-of-Bounds Write via ffgcls2 in getcols.c
CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string columns. Attackers can…
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-115503
— Ghidra before 12.2 Denial of Service via Compressed Extension Archive
Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows attackers to exhaust disk space. Attackers can persu…
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-115398
— Ghidra before 12.2 Denial of Service via TAR and ZIP File System Mount
Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entries. Attackers can p…
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-112332
— Motor.NET < 0.19.0 Denial of Service via JsonNet Deserialization
Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic to crash the service…
Remote
|
Misconfiguration
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-112331
— Motor.NET < 0.19.0 Kafka Denial of Service via Structured CloudEvent Mapping
Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sending a single craft…
Remote
|
Denial of Service
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-112330
— Motor.NET < 0.19.0 RabbitMQ Denial of Service via CloudEvents Headers
Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the service permanently by sending a message with crafted…
Remote
|
Denial of Service
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95721
— Authenticated Local Memory Corruption Vulnerability in AOS-8 Web-Based Management Interfa…
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95720
— Authenticated Local Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95719
— Authenticated Arbitrary File Deletion Vulnerability leads to Denial-of-Service in AOS-10
No description provided
Remote
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95718
— Authentication Bypass Vulnerability in the PAPI Protocol of AOS-8
No description provided
Remote
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95717
— Authenticated Stored Cross-Site Scripting (XSS) Vulnerability in AOS Web-Based Management…
No description provided
Remote
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95716
— Authentication Bypass in the PAPI Protocol of AOS-10 allows Unauthorized Configuration Ch…
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95715
— Unauthenticated Local Command Injection Vulnerability in AOS-10 Command Line Interface
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95714
— Authenticated Adjacent Buffer Overflow Vulnerability leads to Remote Code Execution in AO…
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95713
— Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8 Command…
No description provided
Remote
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
CVE-2026-95712
— Unauthenticated Adjacent Sensitive Information Disclosure and Denial-of-Service in AOS-8 …
No description provided
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
Oct 22, 2026
