Archive
2 November 2026
Vulnerabilities first published on this day (UTC), newest first.
193 results · Clear filters · Feed
-
Medium 6.7
In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a…
-
Medium 6.7
In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege i…
-
Medium 4.4
In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicio…
-
Medium 5.3
In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to rem…
-
Medium 4.4
In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to local denial of service…
-
Medium 6.7
In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege i…
-
Medium 6.7
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege i…
-
Medium 6.7
In afe, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a…
-
Medium 6.7
In adsp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of pri…
-
Medium 6.7
In afe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege i…
-
Medium 6.7
In adsp, there is a possible escalation of privilege due to use after free. This could lead to local escalation of priv…
-
Medium 6.7
In adsp, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege …
-
Medium 6.7
In afe, there is a possible system crash due to use after free. This could lead to local escalation of privilege if a m…
-
Medium 6.7
In afe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 4.8
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of se…
-
Medium 6.2
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of …
-
Medium 5.3
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote denial of…
-
Medium 5.3
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of se…
-
Medium 5.3
In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of se…
-
Medium 5.3
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of servic…
-
Medium 5.3
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of ser…
-
Medium 6.8
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr…
-
Medium 6.5
In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of ser…
-
Medium 5.5
In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of serv…
-
Medium 6.2
In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of serv…
-
Medium 6.3
Webpro-nl Knip Workspace IssueFixer.ts writeFile path traversal
A security vulnerability has been detected in Webpro-nl Knip up to 6.44.0. The impacted element is the function writeFile of the file packages/knip/src/IssueFixer.ts of the component Workspace Handler. Such manipulation of the argument workspaces leads to pat…
-
Medium 5.9
http4k 4.9.10.0 before 6.60.0.0 Digest auth-int Missing Body Integrity
http4k from 4.9.10.0 before 6.60.0.0 contains a missing integrity check vulnerability because DigestEncoder computes the auth-int digest without hashing the request entity body. On-path attackers on non-TLS channels can rewrite the body of authenticated reque…
-
Medium 5.9
http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution
http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allows unauthenticated attackers to read files outside baseTemplateDir by supplying ../ segments in ViewModel.template() values. Attackers can i…
-
Medium 4.3
samanhappy MCPHub passthroughHeaders.ts information disclosure
A security flaw has been discovered in samanhappy MCPHub up to 1.0.45/1.1.7. Impacted is an unknown function of the file src/utils/passthroughHeaders.ts. The manipulation of the argument passthroughHeaders results in information disclosure. The attack may be …
-
Medium 4.7
jxxghp MoviePilot Workflow Fork Endpoint workflow.py WorkflowExecutor.restore_context deserialization
A vulnerability was determined in jxxghp MoviePilot up to 3.1.2. This vulnerability affects the function WorkflowExecutor.restore_context of the file app/chain/workflow.py of the component Workflow Fork Endpoint. Executing a manipulation can lead to deseriali…
-
Medium 6.3
Sanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorization
A vulnerability was found in Sanluan PublicCMS 4.x/5.x/6.x. This affects the function TradeRefundService.updateAmound of the file publiccms-parent/publiccms-trade/src/main/java/com/publiccms/logic/service/trade/TradeRefundService.java of the component publicc…
-
Medium 6.5
Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via th…