Browse CVEs

CRITICAL 9.4 CVE-2026-51260 Unsafe fixed-size memcpy operation in AudioBuffer::writeSpace() of schreibfaul1 ESP32-audioI2S 3.4.5 allows remote heap buffer overflow. The code cop… No fix yet Fix from $2,3002026-07-28 CRITICAL 9.8 CVE-2026-51259 Unchecked unsigned integer overflow in buffer size calculation in schreibfaul1 ESP32-audioI2S 3.4.5 leads to undersized PSRAM buffer allocation. Subs… No fix yet Fix from $2,3002026-07-28 HIGH 7.8 CVE-2026-51254 schreibfaul1 ESP32-audioI2S v3.4.5 has an integer underflow vulnerability in the MP3Decoder::GetBits() function of the MP3 decoder due to unchecked b… No fix yet Fix from $1,9502026-07-28 CRITICAL 9.8 CVE-2026-51252 schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::UnpackSFMPEG1 function due to missing input validation on at… No fix yet Fix from $2,3002026-07-28 HIGH 7.5 CVE-2026-51251 Schreibfaul1 ESP32-audioI2S 3.4.5 has a buffer overflow vulnerability in the MP3Decoder::decode() function of the MP3 decoder due to missing size val… No fix yet Fix from $1,9502026-07-28 HIGH 8.8 CVE-2026-7187 Missing authentication for critical function vulnerability in Universal Software Inc. UKBS allows Accessing Functionality Not Properly Constrained by… Mitigation only Fix from $1,9502026-07-28 MEDIUM 6.1 CVE-2026-65882 Joomla Extension - joomdle.com - Reflected XSS vulnerability in Joomdle < 3.1.1 - The goto url parameter of the moodle wrapper endpoint allowed a ref… No fix yet Fix from $1,6002026-07-28 HIGH 7.5 CVE-2026-65881 Joomla Extension - joomdle.com - Insecure default configuration allows read/write user account access in Joomdle < 3.1.1 - The default configuration … No fix yet Fix from $1,9502026-07-28 MEDIUM 6.5 CVE-2026-62436 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] With the introducti… No fix yet Fix from $1,6002026-07-28 MEDIUM 6.5 CVE-2026-62435 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] With the introducti… No fix yet Fix from $1,6002026-07-28 MEDIUM 5.3 CVE-2026-62434 A guest started with Populated on Demand enabled (PoD) can attempt to reclaim pages which aren't regular guest RAM. This can cause corruption of mem… No fix yet Fix from $1,6002026-07-28 HIGH 7.3 CVE-2026-62433 Parts of the DM_OP handling code assumes the caller has provided the required number of buffers for the given operation without any checking being do… No fix yet Fix from $1,9502026-07-28 HIGH 7.3 CVE-2026-62432 The EVTCHNOP_expand_array hypercall checks for whether FIFO event channels are enabled, but without holding the correct lock. It can race with EVTCH… No fix yet Fix from $1,9502026-07-28 HIGH 7.5 CVE-2026-62431 The logic to handle periodic Viridian STIMERs performs a division with an unchecked user-controlled divisor value, that can be set to zero to cause a… No fix yet Fix from $1,9502026-07-28 HIGH 7.5 CVE-2026-62430 Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the us… No fix yet Fix from $1,9502026-07-28 MEDIUM 6.5 CVE-2026-62429 Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configurati… No fix yet Fix from $1,6002026-07-28 HIGH 7.8 CVE-2026-62428 When grant-copy operations are processed, the respective grant may or may not already be in use by another operation (a mapping or another copy). For… No fix yet Fix from $1,9502026-07-28 HIGH 8.8 CVE-2026-62427 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage the syste… Mitigation only Fix from $1,9502026-07-28 HIGH 8.8 CVE-2026-62426 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] To manage the syste… No fix yet Fix from $1,9502026-07-28 MEDIUM 5.5 CVE-2026-62425 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and R… No fix yet Fix from $1,6002026-07-28 MEDIUM 5.5 CVE-2026-62424 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and R… No fix yet Fix from $1,6002026-07-28 MEDIUM 5.5 CVE-2026-62423 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and R… No fix yet Fix from $1,6002026-07-28 HIGH 8.5 CVE-2026-49332 A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only dash-variant keys (X-Forwarded-User) but does not… No fix yet Fix from $1,9502026-07-28 MEDIUM 5.5 CVE-2026-42495 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and R… No fix yet Fix from $1,6002026-07-28 MEDIUM 6.1 CVE-2026-42494 [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The directory and R… No fix yet Fix from $1,6002026-07-28 HIGH 7.5 CVE-2026-42493 Addressing certain issues, in particular related to operations which may take excessively long and therefore would need preemption, has turned out ov… No fix yet Fix from $1,9502026-07-28 HIGH 7.5 CVE-2026-42492 Xenstore, to have an up-to-date picture of the entire system, wants to know of domains appearing and disappearing. To make this more robust, a new X… No fix yet Fix from $1,9502026-07-28 MEDIUM 6.8 CVE-2026-41874 Quick.Cart stores hard-coded, plaintext admin credentials in a configuration file. This flaw allows attackers with access to the server file system t… No fix yet Fix from $1,6002026-07-28 MEDIUM 6.5 CVE-2026-18047 A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL pattern matching for admin-only enable/disable e… No fix yet Fix from $1,6002026-07-28 MEDIUM 6.4 CVE-2026-15393 The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cros… No fix yet Fix from $1,6002026-07-28