Submit #925227: GNU Binutils 2.47 Memory Corruption [Accepted]
Submit #925227 / VDB-403330
Vuldb Submit
Please support the site operations by clicking ads.
Submit #914952: GPAC GPAC MP4Box v26.07.0 Heap Use-After-Free [Accepted]
Submit #914952 / VDB-403329
Submit #914951: msgpack GPAC MP4Box v26.07.0 Heap Buffer Over-Read / Out-of-Bounds Read [Accepted]
Submit #914951 / VDB-403328
Submit #914950: GPAC GPAC MP4Box v26.07.0 Heap Use-After-Free [Accepted]
Submit #914950 / VDB-403327
Submit #914949: GPAC GPAC MP4Box v26.07.0 Stack Overflow due to Uncontrolled Recursion [Accepted]
Submit #914949 / VDB-403326
Submit #925152: a2a-project a2a-java v1.2.0.Final CWE-862 [Accepted]
Submit #925152 / VDB-403323
Submit #922996: a2aproject a2a-java v1.2.0 CRLF [Accepted]
Submit #922996 / VDB-403322
Submit #922881: NetEase Youdao LobsterAI (lobsterai) 2026.6.15 Server-Side Request Forgery (CWE-918) [Accepted]
Submit #922881 / VDB-403321
Submit #922626: FFmpeg FFmpeg ≤ 8.0.x Denial of Service [Accepted]
Submit #922626 / VDB-403318
Submit #922609: FFmpeg FFmpeg Affected versions: FFmpeg 3.0 and later, prior to the inclusion of commits 8970658472 and e24b9820b4 (merged around late Februar Out-of-Bounds Read [Accepted]
Submit #922609 / VDB-403317
Submit #922880: CosmicStack Labs Mercury Agent (@cosmicstack/mercury-agent) <= 1.1.13 Server-Side Request Forgery (CWE-918) / Token Exfiltration [Accepted]
Submit #922880 / VDB-403316
Submit #922879: CosmicStack Labs Mercury Agent (@cosmicstack/mercury-agent) <= 1.1.13 Incorrect Behavior Order - Validate Before Canonicalize (CWE-180) / Authorization Bypass / Path Traversal [Accepted]
Submit #922879 / VDB-403315
Submit #922878: CosmicStack Labs Mercury Agent (@cosmicstack/mercury-agent) <= 1.2.0 Incorrect Privilege Assignment (CWE-266) / Exposure of Sensitive Information (CWE-200) [Accepted]
Submit #922878 / VDB-403314
Submit #922877: cosmicstack-labs mercury-agent <= 1.2.0 Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) [Accepted]
Submit #922877 / VDB-403313
Submit #922876: cosmicstack-labs mercury-agent <= 1.1.13 Improper Authorization (CWE-285) [Accepted]
Submit #922876 / VDB-403312
Submit #922850: HKUDS nanobot <= 0.2.1 Improper Neutralization of Argument Delimiters in a Command (CWE-88) [Accepted]
Submit #922850 / VDB-403311
Submit #922849: HKUDS nanobot <= 0.2.1 Incomplete List of Disallowed Inputs (CWE-184) [Accepted]
Submit #922849 / VDB-403310
Submit #922841: nanocoai nanoclaw <= 2.1.17 Improper Link Resolution Before File Access / Link Following (CWE-59) [Accepted]
Submit #922841 / VDB-403309
Submit #921799: krakenjs passport-saml-encrypted 0.1.13 xml signature wrapping [Duplicate]
Submit #921799 / VDB-402181
Submit #921765: krakenjs passport-saml-encrypted 0.1.13 authentication bypass missing cert [Duplicate]
Submit #921765 / VDB-402176
Submit