Search: 5.1.8.7

CVE-2025-71438 is an out-of-bounds read vulnerability in the gpac software, specifically in the function gf_odf_ac4_cfg_dsi_v1 within the /odf/descriptors.c file. This flaw can cause an application crash or denial of service. The vulnerability has a medium severity rating with a CVSS score of 5.5. It affects multiple specific versions of gpac as listed. There is no information about available patches or fixes in the provided data.

A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-4 file.

CVE-2026-111833 is a path traversal vulnerability in Bold Grid weForms affecting versions prior to 1.6.29. This flaw allows an attacker to improperly access files outside a restricted directory, potentially leading to denial of service. The vulnerability has a high severity rating with a CVSS score of 7.5. A fix is available in version 1.6.29.

CVE-2026-111837 is a stored cross-site scripting (XSS) vulnerability in the Contest Gallery product by Wasiliy Strecker. The flaw involves improper neutralization of input during web page generation, allowing attackers to inject malicious scripts. This vulnerability affects versions from initial releases up to 34.0.1. A fix is available in version 34.0.2. The CVSS 3.1 base score is 6.5, indicating a medium severity level.

CVE-2026-111840 is a reflected cross-site scripting (XSS) vulnerability in VideoWhisper.com's Paid Videochat Turnkey Site affecting versions prior to 7.5.15. This flaw allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. The vulnerability is rated high severity with a CVSS score of 7.1. A fix is available in version 7.5.15.

CVE-2026-114437 is a medium severity vulnerability in the Go Chi web framework affecting versions before 5.4.0. The ClientIPFromXFF middleware incorrectly trusts the X-Forwarded-For header without verifying that the direct TCP peer address belongs to a configured trusted CIDR. This allows a client connecting directly to the server to spoof the client IP by appending a trusted proxy address, potentially misleading IP-based access controls or logging.

A high-severity vulnerability (CVE-2026-97313) affecting specific versions of Bind9 has been published. The vulnerability has a CVSS 3.1 score of 7.5, indicating a network attack vector with low complexity and no privileges or user interaction required, resulting in high impact on availability but no impact on confidentiality or integrity. A security update addressing this vulnerability is available for the affected Bind9 versions.

A high severity vulnerability (CVE-2026-96888) affecting multiple specific versions of Bind9 has been published. The vulnerability has a CVSS 3.1 score of 7.5, indicating a network exploitable issue with no required privileges or user interaction, causing a high impact on availability. This security update addresses the flaw in the affected Bind9 versions.

A high severity vulnerability (CVE-2026-19630) affecting specific versions of Bind9 has been published. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a network attack vector with low complexity and no privileges or user interaction required. The impact is limited to availability, with no confidentiality or integrity impact reported. Multiple specific Ubuntu package versions of Bind9 are affected.

This update includes the following RPMs: oauth2-proxy: * oauth2-proxy-7.15.5-0.3.hum1 (aarch64, s390x, x86_64) * oauth2-proxy-7.15.5-0.3.hum1.src (src) Security Fix(es): oauth2-proxy: * CVE-2026-111943

Red Hat OpenShift AI 3.5.2 was released as a security advisory addressing multiple vulnerabilities, including CVE-2024-14029. The advisory announces updated images and provides upgrade instructions but does not detail specific fixes for CVE-2024-14029 or other listed CVEs. No explicit affected versions are stated. The advisory is marked critical in severity but does not confirm known exploitation in the wild.

Multiple vulnerabilities in aiohttp versions from 5.14.0_13 up to but not including 5.14.0_18 can lead to excessive or unbounded memory and CPU usage triggered by attacker-controlled requests. This resource exhaustion can disrupt service availability. A fix is available in version 5.14.0_18.

The pure Python HTTP parser in AIOHTTP is vulnerable to an HTTP request smuggling attack when used instead of the default C parser. This affects applications using the Python parser, such as those with the AIOHTTP_NO_EXTENSIONS environment or non-standard wheel installations. A fix is available in version 5.14.0_18. Users are advised to switch to the default C parser to mitigate the issue.

A vulnerability in ScoutSuite versions >=5.14.0_13 and <5.14.0_18 allows a subdomain to remove the Host-Only flag from an existing cookie set for a parent domain. This could reduce cookie security protections for users accessing untrusted subdomains. The impact is limited because most use cases do not reflect these cookies back to browsers.

AIOHTTP versions from 5.14.0_13 up to but not including 5.14.0_18 contain a vulnerability where an attacker can send an absolute-form HTTP request to spoof the Request.scheme attribute. This can mislead applications relying on this attribute for security decisions, potentially causing them to misinterpret whether a connection is encrypted. The issue is fixed in version 5.14.0_18.

NLnet Labs Unbound versions from 1.22.0 up to and including 1.26.1 contain a vulnerability identified as CVE-2026-97206. This vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity, and affects multiple Ubuntu package versions. The flaw does not impact confidentiality or integrity but results in a high impact on availability.

Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2 logging HAL exposes a binder method that fork()'s and calls execl("/vendor/bin/sh", "sh", "-c", cmd, NULL) with a caller-supplied command string. The only authorization check is getCallingUid() == 0. Because SELinux policy grants binder access to this HAL to a wide client attribute, any uid-0 process in any of those domains (including dumpstate, which is reachable from an unprivileged app via Vulnerability 1) obtains arbitrary command execution. The spawned shell lands in u:r:vendor_qti_init_shell:s0 SELinux context via a policy type_transition, a domain holding all Linux capabilities. This issue affects OxygenOS: from 16.1.0 before 16.1.10.500, from 16.0.0 before 16.0.5.1200, and from 15.0.0 before 15.0.0.2000.

CVE-2026-70386 is a high-severity OS command injection vulnerability in OnePlus OxygenOS affecting versions from 15.0.0 before 15.0.0.2000 and from 16.0.0 before 16.0.5.1200. It allows any locally installed Android app, without declared permissions or user interaction beyond launch, to execute arbitrary shell commands as root in a specific SELinux domain. The flaw arises from an unauthorized binder interface accepting event data that is unsafely passed to a system command, leading to privilege escalation.

The Jane Menu WordPress plugin before 1.5.1 does not have any capability or nonce checks on one of its form handlers, which is reachable by unauthenticated users, allowing them to bind any published page to a remote document of their choosing. The plugin then fetches that document and outputs its head and body into the page without escaping, so an unauthenticated attacker can run arbitrary JavaScript in the browser of any visitor to that page, including an administrator.

This security update for Mozilla Firefox Extended Support Release 153.5.0 ESR addresses multiple vulnerabilities across various components including privilege escalation, sandbox escapes, use-after-free bugs, incorrect boundary conditions, information disclosure, mitigation bypasses, race conditions, integer overflows, spoofing, and denial-of-service issues. Additionally, a use-after-free vulnerability in libexpat is fixed. These issues collectively affect core browser functionality such as networking, graphics, JavaScript engine, DOM, storage, and security sandboxing.