Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
80 results · page 1 of 2
Oct 20, 2026Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core).CVE-2026-101490 · Other software · Oracle Corporation · reported by secalert_us@oracle.comMedium 6.1
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).
- Product
- PeopleSoft Enterprise PeopleTools
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 20, 2026Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core).CVE-2026-101486 · Other software · Oracle Corporation · reported by secalert_us@oracle.comMedium 5.4
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.61-8.63. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).
- Product
- PeopleSoft Enterprise PeopleTools
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 20, 2026Values entered by visitors were placed into the HTML summary email without being escaped.CVE-2026-113442 · Other software · TYPO3 · reported by f4fb688c-4412-4426-b4b8-421ecf27b14aMedium 5.3
Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use this to inject HTML into an email that is shown to the recipient.
- Product
- Extension "TYPO3 Fluid-Form by coding.ms"
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 20, 2026The download link for files uploaded through a form relied on a token that could be predicted.CVE-2026-112240 · Other software · TYPO3 · reported by f4fb688c-4412-4426-b4b8-421ecf27b14aMedium 6.3
The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was also not verified in a way that resisted guessing. An unauthenticated attacker could use this to access files uploaded by other visitors. In addition, the token was shown in plain text in the text version of the notification email.
- Product
- Extension "TYPO3 Fluid-Form by coding.ms"
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 15, 2026FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFontCVE-2026-111123 · Other software · FluidSynth · reported by VulnCheckMedium 6.9
FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modulator destination values. Attackers can craft an SF2 file with PMOD/IMOD destinations of 63 to 255 that, when loaded and played, write past the voice generator array and updated_gen_bit, causing memory corruption and crashes.
- Product
- fluidsynth
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2026FluidSynth is a software synthesizer based on the SoundFont 2 specifications.CVE-2026-61723 · Other software · FluidSynth · reported by GitHubMedium 6.8
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl chunks with the unsigned expression cues * 4 + cbsize without checking whether the multiplication and addition fit in 32 bits. A crafted DLS file can supply a large cues value that wraps the expression and passes the chunk-size check, causing poolcues.resize(cues) to request approximately four gigabytes and the parser to read billions of entries beyond the chunk boundary. The excessive allocation and invalid reads can cause denial of service. Builds with enable-native-dls set to OFF are not exposed. This issue is fixed in version 2.5.6.
- Product
- fluidsynth
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2026FluidSynth is a software synthesizer based on the SoundFont 2 specifications.CVE-2026-61722 · Other software · FluidSynth · reported by GitHubMedium 6.8
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates articulation chunks using the unsigned expression cbsize + connblocks * 12 without first ensuring that the multiplication and addition fit in 32 bits. A crafted DLS file can supply a large connblocks value that wraps the expression and bypasses the chunk-size check, after which the parser performs approximately one billion 12-byte iterations beyond the chunk boundary. The excessive processing and invalid reads can cause denial of service. Builds with the CMake option enable-native-dls set to OFF do not expose the parser. This issue is fixed in version 2.5.6.
- Product
- fluidsynth
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2026FluidSynth is a software synthesizer based on the SoundFont 2 specifications.CVE-2026-61721 · Other software · FluidSynth · reported by GitHubHigh 8
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS loader assigns file-controlled wsmp.loop_start and wsmp.loop_length values to samples without calling fluid_sample_validate() or fluid_sample_sanitize_loop(). A crafted DLS file can place sample loop points beyond the sample buffer, causing out-of-bounds reads during audio rendering, undefined behavior, possible memory disclosure, and denial of service. Builds compiled with the CMake option enable-native-dls set to OFF do not expose the affected parser. This issue is fixed in version 2.5.6.
- Product
- fluidsynth
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2026FluidSynth is a software synthesizer based on the SoundFont 2 specifications.CVE-2026-61720 · Other software · FluidSynth · reported by GitHubMedium 6.2
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 parser computes the DMOD modulator count as chunk.size / SF_MOD_SIZE - 1 without rejecting chunks smaller than one record. A crafted SF2 file containing a zero-sized DMOD chunk makes the unsigned subtraction wrap to UINT_MAX, and the parser then attempts billions of SFMod allocations. This exhausts process memory and causes denial of service. No workaround is available. This issue is fixed in version 2.5.6.
- Product
- fluidsynth
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2026FluidSynth is a software synthesizer based on the SoundFont 2 specifications.CVE-2026-61714 · Other software · FluidSynth · reported by GitHubHigh 7.8
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.2.4 until 2.5.6, configuring synth.midi-channels above 16 allows the MIDI player to index _fluid_player_t::channel_isplaying outside its fixed-size heap allocation while tracking active channels. The resulting out-of-bounds reads and writes invoke undefined behavior and may compromise confidentiality, integrity, or availability. No crafted MIDI file is required because the unsafe condition is created by the channel-count configuration itself. Keeping synth.midi-channels at its default value of 16 avoids the vulnerable path. This issue is fixed in version 2.5.6.
- Product
- fluidsynth
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2026FluidSynth is a software synthesizer based on the SoundFont 2 specifications.CVE-2026-58264 · Other software · FluidSynth · reported by GitHubCritical 9.8
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 1.1.2 until 2.5.6, the FluidSynth command handler accepts a pitch_bend_range command whose channel argument is not bounds checked before the supplied value is written through the selected synth channel. An out-of-range channel can therefore cause an out-of-bounds heap write, leading to denial of service or possible code execution. The issue is remotely reachable when the TCP server is enabled through new_fluid_server() or fluidsynth -s, and it is locally reachable through malicious commands delivered to the FluidSynth shell on standard input. Applications that do not use the shell, command handler, or TCP server are not affected. This issue is fixed in version 2.5.6.
- Product
- fluidsynth
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 25, 2026The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, witCVE-2026-77136 · Other software · TYPO3 · reported by f4fb688c-4412-4426-b4b8-421ecf27b14aCritical 9.5
The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute arbitrary Fluid ViewHelpers leading to disclosure of server configuration, environment variables and application source, and potentially remote code execution. Exploitation requires only that a form field is configured as the sender_name field, a common and default-adjacent Powermail configuration. No authentication or user interaction beyond a normal form submission is required. This vulnerability is reported to be actively exploited in the wild.
- Product
- Extension "powermail"
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 25, 2026The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction.CVE-2026-77129 · Other software · TYPO3 · reported by f4fb688c-4412-4426-b4b8-421ecf27b14aHigh 7.7
The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript content objects. Exploitation of this issue requires an authenticated backend account with edit access to the event registration plugin or backend module.
- Product
- Extension "Event management and registration"
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Apr 21, 2026Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core).CVE-2026-34277 · Other software · Oracle Corporation · reported by secalert_us@oracle.comMedium 6.6
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.61-8.62. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L).
- Product
- PeopleSoft Enterprise PeopleTools
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 9, 2026fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi fiCVE-2025-56225 · Other software · Fluidsynth · reported by MITREHigh 7.5
fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluid_synth_monopoly.c, that can be triggered when loading an invalid midi file.
- Product
- Fluidsynth
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Dec 23, 2025FluidSynth is a software synthesizer based on the SoundFont 2 specifications.CVE-2025-68617 · Other software · FluidSynth · reported by GitHubHigh 7
FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From versions 2.5.0 to before 2.5.2, a race condition during unloading of a DLS file can trigger a heap-based use-after-free. A concurrently running thread may be pending to unload a DLS file, leading to use of freed memory, if the synthesizer is being concurrently destroyed, or samples of the (unloaded) DLS file are concurrently used to synthesize audio. This issue has been patched in version 2.5.2. The problem will not occur, when explicitly unloading a DLS file (before synth destruction), provided that at the time of unloading, no samples of the respective file are used by active voices. The problem will not occur in versions of FluidSynth that have been compiled without native DLS support.
- Product
- fluidsynth
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31198 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 5.3
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::Port:unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Improper Null Termination vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31197 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 5.3
Improper Null Termination vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::Port:unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31196 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 5.3
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::ActionList::unpack10. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31195 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyTable::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31194 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyPortStats::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31193 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyGroup::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31192 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyGroupDesc::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31191 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyMeter::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31190 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyMeterConfig::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31189 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartRequestTableFeatures::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31188 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyTableFeatures::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31187 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyPortDescription::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31186 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::QueueGetConfigReply::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31185 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 5.3
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MeterBandList::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31184 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MeterStats::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31183 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::Hello::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31182 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 5.3
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::QueuePropertyList::unpack10. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31181 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::GroupStats::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31180 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::GroupDesc::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31179 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TableFeaturePropInstruction::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31178 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TableFeaturePropNextTables::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg modules).CVE-2024-31177 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg modules). This vulnerability is associated with program routines fluid_msg::of13::TableFeaturePropActions::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31176 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TableFeaturePropOXM::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31175 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 5.3
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TablePropertiesList::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31174 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::FeaturesReply::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31173 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyFlow::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31172 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyTable::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31171 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyPort::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31170 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::StatsReplyQueue::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31169 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::QueueGetConfigReply::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31168 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::EchoCommon::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31167 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 5.3
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::QueuePropertyList::unpack13. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31166 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 6.5
Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::HelloElemVersionBitmap::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 18, 2024Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module).CVE-2024-31165 · Other software · Open Networking Foundation (ONF) · reported by prodsec@nozominetworks.comMedium 5.3
Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::SetFieldAction::unpack. This issue affects libfluid: 0.1.0.
- Product
- libfluid
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.