disclosure@vulncheck.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS disclosure@vulncheck.com
03
assessed vulnerabilities (9,869)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-115509US | medium4.2OT elevated | — | ||
Jitsu console before 2.14.0-beta.41 contains an incorrect authorization vulnerability in sources/state.ts handlers that call findFirst without await, so the syncId ownership check… | ||||
| CVE-2026-115508US | medium6.5 | — | ||
Crawl4AI 0.7.0 before 0.9.5 contains an inefficient regular expression complexity vulnerability in the Docker API server that allows authenticated API clients to supply unbounded r… | ||||
| CVE-2026-115507US | low3.5 | — | ||
Vikunja 2.2.0 before 2.7.1 contains an HTML injection vulnerability in CreateConversationalHeader in pkg/notifications/mail.go that interpolates display names and task and project… | ||||
| CVE-2026-115506US | high7.5 | — | ||
libexpat through 2.9.0 contains a denial of service vulnerability because billion laughs protection in accountingDiffTolerated() in xmlparse.c detects entity amplification too late… | ||||
| CVE-2026-115505US | high7.6 | — | ||
libsmb2 before 6.3 contains integer overflow vulnerabilities in the DCE/RPC NDR decoder in lib/dcerpc.c that allow heap out-of-bounds reads and writes. A malicious SMB server or ma… | ||||
| CVE-2026-115504US | high7.8 | — | ||
CFITSIO through 4.7.0 contains an out-of-bounds write vulnerability in ffgcls2() in getcols.c that trusts attacker-controlled heap descriptor lengths for variable-length string col… | ||||
| CVE-2026-115503US | medium5.5 | — | ||
Ghidra before 12.2 contains an improper handling of highly compressed data vulnerability in ExtensionUtils.unzipToInstallationFolder() that allows attackers to exhaust disk space.… | ||||
| CVE-2026-115398US | medium5.5 | — | ||
Ghidra before 12.2 contains a resource allocation without limits vulnerability in FileSystemIndexHelper used by TarFileSystem and ZipFileSystem, which store unbounded archive entri… | ||||
| CVE-2026-112332US | high7.5 | — | ||
Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a remote attacker who can publish to a consumed queue or topic t… | ||||
| CVE-2026-112331US | high7.5 | — | ||
Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce records to a consumed topic to crash the service permanently by sen… | ||||
| CVE-2026-112330US | high7.5 | — | ||
Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a consumed queue to crash the service permanently by sending a m… | ||||
| CVE-2026-115397US | medium5.5 | — | ||
Ghidra before 12.2 contains a resource allocation without limits vulnerability in ExtensionUtils.unzipToInstallationFolder() that extracts every extension ZIP entry without limitin… | ||||
| CVE-2026-115396US | medium5.5 | — | ||
Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in ThemeReader.processIconFile() that fails to limit decompressed size or compression… | ||||
| CVE-2026-115395US | medium5.5 | — | ||
Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that extracts unlimited theme ZIP entries to the images directory.… | ||||
| CVE-2026-115394US | medium5.5 | — | ||
Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows attackers to exhaust heap memory via an unchecked 32-bit length field… | ||||
| CVE-2026-115393US | low3.8 | — | ||
Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type confusion vulnerability because several Store APIs fail to validate t… | ||||
| CVE-2026-115392US | high7.9 | — | ||
Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem sandbox escape in wasmtime-wasi because its cap-std dependency mi… | ||||
| CVE-2026-115391US | medium5.8 | — | ||
Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in its WASIp3 implementation that buffers guest-specified-length w… | ||||
| CVE-2026-115390US | medium5.7 | — | ||
Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift-compiled call_ref and try_table catch paths. Malicious guests can reset consumed… | ||||
| CVE-2026-115389US | low2.3 | — | ||
Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account for host allocations when lifting guest values through the dynamically-typed Val… | ||||