CVE-2026-38332Published
TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length.
cve-program ·
Vendor product: TinyEXIF
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
699801 source statements · aliases may refer to the same vulnerabilityCVE-2022-42917Published
In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/etc/frr) and replacing config files upon creation with, for example, symlinks to change the ownershi…
cve-program ·
Vendor product: FRRouting
GHSA-5cph-wvm9-45gjPublished
Flowise OverrideConfig security vulnerability
osv · CVE-2024-58351
npm: flowise
GHSA-5w6g-rc45-wvv9Withdrawn
Duplicate Advisory: Flowise OverrideConfig security vulnerability
osv ·
npm: flowise
CVE-2026-68006Published
An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitrary code via the ext/puma_http11/http11_parser.rl file
cve-program ·
Vendor product: n/a
CVE-2026-23786Published
An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. A TOCTOU race condition in the Exynos DRM HDR Driver leads to a heap overflow, causing a kernel crash.
cve-program ·
Vendor product: Exynos 1280 firmware
CVE-2026-44162Published
fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`
cve-program ·
Vendor product: fluent-plugin-s3
CVE-2026-23791Published
An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds write vulnerability in the Exynos DPU driver (due to missing input length validation in color mode …
cve-program ·
Vendor product: Exynos 1280 firmware
CVE-2026-33957Published
An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580. Requesting oversized shared memory from the custos_iwc device enables out-of-bounds read and write, potentially leading to memory corruption or information le…
cve-program ·
Vendor product: Exynos 1580 firmware
CVE-2026-33966Published
An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680. An information Leak occurs in the camera driver due to Insertion of Sensitive Information Into Debugging Code.
cve-program ·
Vendor product: Exynos 1330 firmware
CVE-2026-90668Published
The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attackers to cause a denial of service (memory consumption and unresponsive server) via an HTTP request with…
cve-program ·
Vendor product: UnrealIRCd
CVE-2023-22631Published
PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor.
cve-program ·
Vendor product: PRTG Network Monitor
CVE-2023-24284Published
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_markable() function.
cve-program ·
Vendor product: Portable Puzzle Collection
CVE-2023-24291Published
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length parameter.
cve-program ·
Vendor product: Portable Puzzle Collection
CVE-2023-34854Published
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function.
cve-program ·
Vendor product: HotelDruid
CVE-2023-45023Published
The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component.
cve-program ·
Vendor product: femanager
CVE-2026-55832Published
Tract: Arbitrary file read via unsanitized ONNX external_data `location` (path traversal) on model load in tract-onnx
cve-program ·
Vendor product: tract
CVE-2023-50460Published
An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confirmUser, refuseUser, and resendUserConfirmation) for any fron…
cve-program ·
Vendor product: femanager
CVE-2026-90929Published
File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup
cve-program ·
Vendor product: filebrowser
CVE-2026-54175Published
backpack/crud: Unverified password change in MyAccountController via mass assignment
cve-program ·
Vendor product: CRUD
CVE-2026-90934Published
EspoCRM before 10.0.4 Field-level Security Bypass via Attendees
cve-program ·
Vendor product: espocrm
CVE-2026-7208Published
Yealink SIP-T33G < 124.87.0.0 Race Condition via Diagnostic File Deletion
cve-program ·
Vendor product: SIP-T33G
CVE-2026-57115Published
PraisonAI: SpiderTools redirect-target SSRF protection bypass
cve-program ·
Vendor product: PraisonAI · Vendor product: praisonaiagents
CVE-2026-57123Published
PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in
cve-program ·
Vendor product: praisonaiagents
CVE-2026-57122Published
PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)
cve-program ·
Vendor product: PraisonAI
CVE-2026-57145Published
PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation
cve-program ·
Vendor product: PraisonAI
CVE-2026-57570Published
backpack/crud: HasMany/MorphMany relation fields allow cross-tenant record re-parenting (IDOR) via attachManyRelation
cve-program ·
Vendor product: CRUD
CVE-2026-38626Published
Garlic-Hub v1.0.1 is vulnerable to SQL Injection in src/Modules/Items/Repositories/ItemsRepository.php.
cve-program ·
Vendor product: n/a
CVE-2026-77147Published
Apache Syncope: Groovy Sandbox escape for empty CommandArgs
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.syncope.core:syncope-core-spring
CVE-2026-73195Published
Apache Syncope: CSV export spreadsheet formula injection
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.syncope.core:syncope-core-provisioning-java
CVE-2026-90495Published
Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance->findAll sql injection
cve-program ·
Vendor product: Feng Office
CVE-2026-90500Published
lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload
cve-program ·
Vendor product: vhr
CVE-2026-90505Published
vvbbnn00 WARP-Clash-API doUpdateLicenseKey race condition
cve-program ·
Vendor product: WARP-Clash-API
CVE-2026-47256Published
OpenTelemetry: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token
cve-program ·
Vendor product: opentelemetry-collector-contrib · Vendor product: github.com/open-telemetry/opentelemetry-collector-contrib/exporter/sentryexporter
CVE-2026-90806Published
DjangoCRM django-crm Bulk Case Update bulk_views.py BulkUpdateCasesView authorization
cve-program ·
Vendor product: django-crm
CVE-2026-90510Published
dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key
cve-program ·
Vendor product: orion-visor
CVE-2026-48054Published
OpenZeppelin Contracts Wizard has Code Injection in Generated Hardhat and Foundry Tests via Unsanitized opts.name / opts.uri
cve-program ·
Vendor product: contracts-wizard
CVE-2026-57579Published
Alchemy: Unauthenticated nested page API leaks restricted & unpublished content
cve-program ·
Vendor product: alchemy_cms
CVE-2026-50276Published
dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS
cve-program ·
Vendor product: dd-trace-rb
CVE-2026-46696Published
October CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder Calls
cve-program ·
Vendor product: system
CVE-2026-53495Published
containerd CRI ExecSync Goroutine Leak Leading to Node-Level Denial of Service
cve-program ·
Vendor product: containerd
CVE-2026-90516Published
SourceCodester School Registration and Fee System pay_report.php sql injection
cve-program ·
Vendor product: School Registration and Fee System
MAL-2026-16152Published
Malicious code in strapi-plugin-os-info-meeb322k (npm)
osv ·
npm: strapi-plugin-os-info-meeb322k
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.