Search: 18.8.3.2

CVE-2026-92262 is a critical vulnerability in MariaDB server affecting multiple versions from 10.6.1 up to but not including 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2. It involves the #mysql50# prefix bypassing normal table-name filesystem encoding, allowing attackers to access files using legacy unencoded names. This can lead to crashes, data corruption, data exfiltration, or remote code execution. The issue is fixed in the specified later versions.

CVE-2026-77630 is a high-severity vulnerability in libupnp, an SDK for developing UPnP devices and control point applications. The vulnerability has a CVSS score of 7.5 and impacts availability without affecting confidentiality or integrity. Multiple specific versions of libupnp, including various Ubuntu package versions, are affected. No public exploits or patches are currently documented in the provided data.

CVE-2026-57487 is a high severity vulnerability in libupnp, an SDK for developing UPnP devices and control point applications. The vulnerability has a CVSS 3.1 score of 7.5 with an impact on availability but no confidentiality or integrity impact. Multiple specific versions of libupnp are affected. No public exploits or vendor patches are currently documented.

CVE-2026-57486 is a high-severity vulnerability in libupnp, an SDK used for developing UPnP devices and control point applications. The vulnerability has a CVSS 3.1 score of 7.5, indicating it can cause a significant impact on availability without requiring user interaction or privileges. Multiple specific versions of libupnp are affected, including various Ubuntu package versions. No public exploits or vendor patches are currently documented.

TuxGuitar, an open-source guitar tablature editor, has a high-severity vulnerability identified as CVE-2026-55543 affecting multiple versions prior to 2.1.0. The vulnerability has a CVSS v4.0 score of 8.5, indicating significant impact potential. The affected versions include various builds from 1.2-20build1 through 2.0.0+dfsg1-2. No public exploit or known active exploitation is reported. The vulnerability requires user interaction and local access with low attack complexity but results in high confidentiality, integrity, and availability impacts.

A high severity security vulnerability (CVE-2026-46472) affects multiple versions of gst-plugins-good1.0. The vulnerability has a CVSS 3.1 base score of 7.5, indicating it can be exploited remotely without privileges or user interaction to cause a complete confidentiality breach. The issue was publicly disclosed on October 23, 2026, and impacts various Ubuntu package versions of gst-plugins-good1.0.

A vulnerability was discovered in GStreamer gst-plugins-good versions prior to 1.28.2, affecting multiple Ubuntu package versions. The flaw has a CVSS 3.1 base score of 5.5, indicating medium severity. It requires local access with low attack complexity and no privileges, but user interaction is needed. The vulnerability impacts confidentiality but not integrity or availability. No public exploits or known in-the-wild exploitation have been reported. No patch or remediation details are provided in the available data.

A low-severity vulnerability was found in libblockdev affecting multiple specific versions. The flaw involves the bd_fs_ntfs_set_label() function and related components. The vulnerability has a CVSS score of 3.3, indicating limited impact primarily on integrity with no confidentiality or availability impact. No public exploits or known active exploitation have been reported.

Thermo Fisher Torrent Suite Software versions up to 5.18 contain a path traversal vulnerability (CWE-22) that allows an authenticated attacker to read arbitrary files accessible to the web service account on the Torrent Server. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity. There is no information about available patches or vendor advisories addressing this issue.

A high-severity vulnerability (CVE-2026-105958) was found in spice-server affecting multiple specific versions. The flaw involves multiple migration data handlers. The CVSS 3.1 score is 7.5, indicating high impact on confidentiality, integrity, and availability. No public exploits or known active exploitation are reported. The affected versions are specific builds of spice-server mostly around version 0.12.4 to 0.12.6 with various Ubuntu package suffixes.

Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Passster: from n/a through 4.3.18.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calendar: from n/a through 6.18.1.

A high-severity vulnerability (CVE-2026-105959) was found in spice-server versions including 0.12.4-0nocelt1 through 0.12.6-4ubuntu0.4. The flaw involves the GLZ encoder dictionary restore process. It has a CVSS 3.1 score of 7.5, indicating network attack vector, high impact on confidentiality, integrity, and availability, and requires low privileges but high attack complexity. No public exploits or known active exploitation have been reported.

A heap-based buffer overflow vulnerability exists in the fanx_fingerprint function of ssldump's sslxprint.c. The function miscalculates the required buffer size for formatting FAN/1 X.509 certificate fingerprints, leading to a 3-byte overflow when processing crafted TLS X.509 certificates. An attacker supplying a malicious pcap file to a user running ssldump with FAN/1 fingerprinting enabled can trigger this overflow, potentially causing a crash or arbitrary code execution under the user's privileges.

FreeRDP versions before 3.32.0 contain a client-side heap out-of-bounds write vulnerability in the functions general_LumaToYUV444 and general_ChromaV2ToYUV444. This flaw allows malicious RDP servers to send specially crafted RDPGFX AVC444 or AVC444v2 frames with odd-height region rectangles that cause memory corruption beyond the U/V planes. The vulnerability can lead to heap corruption and potentially remote code execution on the client side. The issue is fixed in FreeRDP version 3.32.0 and later.

FreeRDP versions before 3.32.0 contain a heap buffer overflow vulnerability in the persistent_cache_read_entry_v2 function. This flaw arises from an integer wraparound during bitmap size calculation, allowing local attackers to craft malicious persistent cache v2 files with oversized dimensions. Exploiting this can lead to heap memory corruption, causing crashes or potential code execution when the crafted file is loaded.

FreeRDP versions from 3.29.0 up to but not including 3.32.0 contain an integer overflow vulnerability in the Apple audin backends. This flaw occurs due to unsafe UINT32 arithmetic when calculating audio queue buffer sizes, allowing a malicious RDP server to cause undersized buffer allocations and a heap out-of-bounds write on macOS and iOS clients. The issue bypasses a previous fix (CVE-2026-91962).

FreeRDP versions before 3.32.0 contain a heap buffer overflow vulnerability in the function persistent_cache_read_entry_v3. This flaw allows local attackers to corrupt memory by providing a crafted v3 persistent cache file with manipulated width and height values, causing a buffer overflow during data reading. The vulnerability can lead to potential code execution. A fix is available in FreeRDP version 3.32.0 and later.

FreeRDP versions from 3.0.0 up to but not including 3.32.0 contain an uncontrolled resource consumption vulnerability in the parse_nla_mode_pdu function. This flaw allows unauthenticated attackers to exhaust server memory by sending TLS streams with bytes that do not start with the expected DER SEQUENCE tag, causing unbounded growth of the receive buffer before NLA authentication. The vulnerability has a high severity with a CVSS score of 7.5 and is fixed in version 3.32.0.

FreeRDP versions from 2.0.0 up to but not including 3.32.0 contain an unbounded reassembly vulnerability in the WTSProcessChannelData function. This flaw allows authenticated clients to send an unlimited number of fragments without enforcing cumulative fragment limits, potentially exhausting server memory. The vulnerability has been assigned CVE-2026-111377 and is rated medium severity with a CVSS score of 6.5. Fixed versions are available starting from 3.32.0.