CVE Notifier

CVE-2026-77396 CWE-122 N/A

PJSIP: Heap buffer overflow in the AVI parser

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/avi_player.c uses an input-file video chunk length as the number of bytes co…

cve.org pjsip:pjproject 1 hari lalu

CVE-2026-93764 CWE-312 6.5

Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation

Mongoid may omit encryption rules for fields declared on embedded models when generating the client-side field-level encryption schema. Applications that enable this feature can therefore store values intended to be encr…

cve.org MongoDB · Inc.:Mongoid 1 hari lalu

CVE-2026-92701 CWE-346 9.1

Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path

trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS (aTLS) Intel TDX verification path does not copy the expected current-session freshness value into the TDX quote-bod…

cve.org ultravioletrs:cocos 1 hari lalu

CVE-2026-64847 CWE-770 N/A

AnyIO process-pool workers can block indefinitely on undrained stderr

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. Prior to 4.14.2, AnyIO starts process-pool workers with standard error connected to a pipe that the par…

cve.org agronholm:anyio 1 hari lalu

CVE-2025-66455 CWE-502 9.8

LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0.9.2 and prior to version 0.16.0, LMDeploy's PyTorch DistServe/PD-disaggregation control plane used `recv_pyobj()`…

cve.org InternLM:lmdeploy 1 hari lalu

CVE-2026-92702 CWE-346 9.1

Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path

Cocos AI is a confidential computing system for running AI workloads inside trusted execution environments. In versions up to and including 0.8.2, the intra-handshake attested TLS (aTLS) AMD SEV-SNP verification path doe…

cve.org ultravioletrs:cocos 1 hari lalu

CVE-2026-63349 CWE-266 N/A

AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups

AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio. In 4.14.0, AnyIO accepts the POSIX extra_groups argument in anyio.run_process() and anyio.open_process(…

cve.org agronholm:anyio 1 hari lalu

CVE-2026-93765 CWE-470 9.1

Document deletion and process crash via unvalidated method-name dispatch in atomic pop operation

Mongoid contains an unsafe reflection weakness in the document persistence layer of its object-document mapping code. Input whose keys are passed through from an unauthenticated party by an embedding application can caus…

cve.org MongoDB · Inc.:Mongoid 1 hari lalu

CVE-2026-77616 CWE-79 6.1

Semantic MediaWiki affected by reflected XSS in `Special:Ask` via a forged cursor pagination token

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. In versions 7.0.0 through 7.1.0, `Special:Ask` accepts a `cursor` query parameter for keyset …

cve.org SemanticMediaWiki:SemanticMediaWiki 1 hari lalu

CVE-2026-93758 CWE-639 8.1

Cross-principal document update, theft, and deletion via unvalidated id in nested attributes

An insecure direct object reference in the nested attributes handling of the Mongoid object-document mapper may allow a user with basic application privileges to reference a record identifier that is not their own. Proce…

cve.org MongoDB · Inc.:Mongoid 1 hari lalu

CVE-2026-61833 CWE-285 8.1

zot: Bearer authentication maps DELETE to push scope, allowing unauthorized deletion

zot is a container image and artifact registry based on the Open Container Initiative Distribution Specification. Prior to 2.1.18, the bearer authentication handler in pkg/api/authn.go maps every HTTP method other than G…

cve.org project-zot:zot 1 hari lalu

CVE-2026-77610 CWE-79 6.1

Semantic MediaWiki has a query debug output XSS (`DebugFormatter`)

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, query debug output (`format=debug`, or the `debug` request parameter …

cve.org SemanticMediaWiki:SemanticMediaWiki 1 hari lalu