Matching records, newest first
Filter
- 1.9CVE-2026-113388EPSS 0.2%
A security flaw has been discovered in opensource-socialnetwork up to 9.11/10.1. This affects the function input of the file actions/administrator/cache/dynamic.php of the component Cache Settings. Performing a manipulation of the argument…
- 1.9CVE-2026-113385EPSS 0.1%
A vulnerability has been found in LeeDrOiD Labs Shortcutter 2 App 9.0.48 on Android. This issue affects the function Class.forName of the file ToggleGeneric.java. The manipulation of the argument Class leads to improper export of android a…
- 8.8CVE-2026-105949EPSS 0.3%
Cruise Control's Jetty ConstraintSecurityHandler registers security constraints on exact path specs without a catch-all wildcard constraint and without calling setDenyUncoveredHttpMethods(true). The servlet routes requests using Path.of(pa…
- 9.9CVE-2026-105312EPSS 0.3%
A Kubernetes tenant with create permission on Console custom resources can set spec.containers.api.spec.image to an arbitrary container image. The operator deploys this image into a pod whose ServiceAccount is bound via ClusterRoleBinding …
- 7.7CVE-2026-105311EPSS 0.3%
The StreamsHub Console operator acts as a confused deputy: a Kubernetes tenant with permission to create a Console custom resource can set spec.kafkaClusters[].credentials.kafkaUser.namespace to any namespace. The operator, running with cl…
- 9.3CVE-2026-9589EPSS 0.4%
Missing authorization in the configuration cascade operations of the Collaboration Server in Unblu inc. Unblu Spark 7.0 through 8.36.1-hotfix.0, on on-premises and cloud deployments, allows an authenticated remote attacker to read and chan…
- 2.1CVE-2026-113384EPSS 0.3%
A flaw has been found in Optimal IdM OptimalCloud 5.0. This vulnerability affects unknown code of the file /v5.0/social. Executing a manipulation of the argument state can lead to open redirect. The attack can be executed remotely. The ven…
- 2.1CVE-2026-113383EPSS 0.3%
A vulnerability was detected in Optimal IdM OptimalCloud 5.0. This affects an unknown part of the file /v5.0/webapps/pages/public/Login. Performing a manipulation of the argument tz results in cross site scripting. Remote exploitation of t…
- 2.1CVE-2026-113382EPSS 0.3%
A security vulnerability has been detected in arizu-id fast-tunnel 1.0.0. Affected by this issue is the function ZipArchive::extractTo of the file backend/api_plugins.php of the component Plugin Installer. Such manipulation of the argument…
- 8.7CVE-2026-113358EPSS 0.4%
LavaLite CMS through 10.1.2 contains a missing authentication vulnerability in the Filer module that allows unauthenticated attackers to download stored files through the filer/download and filer/display routes. Attackers can supply arbitr…
- 5.1CVE-2026-113357EPSS 0.2%
@e2e-dev/github before 0.4.1 contains an improper authorization vulnerability that allows pull request commenters to hijack CI test reports by posting comments with the predictable marker. Because findComment and upsertComment in post.ts n…
- 7.7CVE-2026-113356EPSS 0.5%
DokuWiki before 2026-07-14c contains a PHP object injection vulnerability in Draft::getDraftText() that passes draft file contents to unserialize() without restricting allowed classes. Authenticated users with edit rights can race concurre…
- 4.8CVE-2026-113355EPSS 0.2%
Chatwoot before 4.14.0 contains a stored cross-site scripting vulnerability that allows account administrators to inject JavaScript by crafting video-embed links in Help Center articles. Attackers can use angle-bracket link destinations wi…
- 7.1CVE-2026-113354EPSS 0.4%
Dockhand before 1.0.46 contains an arbitrary file read vulnerability that allows non-admin users with stacks:edit permission to read files through the path parameter of /api/system/files/content. Attackers can supply absolute paths to read…
- 5.3CVE-2026-113353EPSS 0.3%
LearnPress before 4.4.10 contains a missing authorization vulnerability in the admin_course_editor, admin_quiz_editor and admin_question_editor lp-ajax actions, allowing instructors to modify other instructors' content. Authenticated instr…
- 7.7CVE-2026-113352EPSS 0.6%
uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept enabled. Attackers can overwrite shell startup files or plant cr…
- 8.2CVE-2026-113351EPSS 0.5%
libexpat 2.7.2 through 2.9.0 contains a denial of service vulnerability because XML_ParserReset zeroes the direct byte count but never offsets tracked heap allocations. Attackers can submit a large XML document so later documents on the sa…
- 5.1CVE-2026-113350EPSS 0.2%
react-admin before 5.15.5 contains a stored cross-site scripting vulnerability that allows attackers to inject scripts by storing javascript: URIs in record fields rendered by UrlField and FileField. Attackers who can influence URL-type ba…
- 5.3CVE-2026-113349EPSS 0.3%
OpenCATS before 0.10.0 contains a missing authorization vulnerability in CalendarUI::onEditEvent() and onDeleteEvent() that allows authenticated users to modify or delete other users' calendar events. Attackers with EDIT or DELETE access c…
- 5.3CVE-2026-112787EPSS 0.3%
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ReportsUI::handleRequest() that allows authenticated users to view EEO demographic reports without the canSeeEEOInfo permission. Attackers can invoke the customizeEEO…
- 5.3CVE-2026-112786EPSS 0.3%
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ImportUI::handleRequest() that allows low-privileged authenticated users to roll back data imports. Attackers with READ-level access can request the import module's r…
- 5.3CVE-2026-112785EPSS 0.3%
OpenCATS before 0.10.0 contains a missing authorization vulnerability that allows READ-level users to create, rename, delete, and populate saved lists via AJAX endpoints. Authenticated attackers can send requests to newList.php, editListNa…
- 5.3CVE-2026-112784EPSS 0.2%
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/testEmailSettings.php that allows any authenticated user to send mail through the configured SMTP relay. Read-level users can supply testEmailAddress and fromAdd…
- 5.3CVE-2026-112783EPSS 0.3%
OpenCATS before 0.10.0 contains a missing authorization vulnerability in ajax/deleteActivity.php and ajax/editActivity.php that allows READ-level users to edit and delete activity entries. Authenticated attackers can supply an arbitrary ac…
- 7.5CVE-2026-108089EPSS 0.5%
** UNSUPPORTED WHEN ASSIGNED ** Exposure of sensitive system information to an unauthorized control sphere vulnerability in Apache Cocoon. An unauthenticated user could gain access to diagnostic interfaces, including triggering of cache, e…
- 7.5CVE-2026-108088EPSS 0.2%
** UNSUPPORTED WHEN ASSIGNED ** Use of cache containing sensitive information vulnerability in Apache Cocoon. When using the cache on a multi-user application, cached values for one user could be used when serving content for other users. …
- –CVE-2026-108087EPSS 0.3%
** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow…
- –CVE-2026-108086EPSS 0.2%
** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. XEE in the fp: form processor could lea…
- 6.9CVE-2026-108062EPSS 0.5%
Pre-authentication OIDC discovery and JWKS fetches run synchronously on the asyncio event loop, so one unauthenticated request stalls the whole service.
- 5.1CVE-2026-107597EPSS 0.4%
PIA's token verification (`verify_token` in `pia/oidc.py`) fetches the OIDC discovery document of an allowlisted issuer and then follows the `jwks_uri` contained in that response without parsing it as a URL, comparing it against the approv…
- 8.7CVE-2026-85267EPSS 0.2%
A Cross-Site WebSocket Hijacking vulnerability in Cloud Shell prior to 2026-07-22 on Google Cloud Platform allows an unauthenticated attacker to hijack an active Cloud Shell session and exfiltrate the user's OAuth access token using a cros…
- 8.6CVE-2026-43858EPSS 0.7%
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
- 8.6CVE-2026-43857EPSS 0.7%
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service.
- 8.6CVE-2026-43856EPSS 0.7%
A stack-based buffer overflow vulnerability in the FileProcess::CheckDir function could allow a remote authenticated attacker to achieve arbitrary code execution via a path longer than 1024 bytes.
- 7.5CVE-2026-43855EPSS 0.5%
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution.
- 6.3CVE-2026-43854EPSS 0.10%
A vulnerability could allow an attacker with access to an encrypted project file to retrieve administrator credentials for EdgeLink-enabled devices.
- 8.2CVE-2026-43853EPSS 0.4%
A vulnerability could allow an attacker to send a crafted message to trigger an assertion fault, causing the service to crash.
- 8.2CVE-2026-43852EPSS 0.4%
A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.
- 8.2CVE-2026-43851EPSS 0.4%
A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.
- 8.6CVE-2026-43850EPSS 1.6%
A command injection vulnerability could allow an authenticated attacker to achieve root-level code execution on the system.
- 6.9CVE-2026-43849EPSS 0.4%
A heap memory read vulnerability could allow an attacker to exfiltrate sensitive data.
- 6.9CVE-2026-113468EPSS 0.4%
The payment notification endpoint for PayPal accepts incoming data without verifying that it comes from the payment provider. Any site visitor can overwrite the stored payment notification of an order that is still awaiting payment with ar…
- 7.1CVE-2026-113459EPSS 0.4%
In versions running on TYPO3 10 and 11, the configured OpenAI API key is embedded in every backend page, so that the editor plugin can contact the OpenAI service directly from the browser. Any authenticated backend user can read the key an…
- 5.3CVE-2026-113442EPSS 0.5%
Values entered by visitors were placed into the HTML summary email without being escaped. An unauthenticated attacker could use this to inject HTML into an email that is shown to the recipient.
- 5.5CVE-2026-113381EPSS 0.4%
A weakness has been identified in Osclass up to 8.3.1. Affected by this vulnerability is the function Item::findUserItems of the file oc-includes/osclass/model/Item.php of the component Item Model Handler. This manipulation of the argument…
- 1.9CVE-2026-113378EPSS 0.8%
A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Search Tool. The manipulation of the argument fileType results in os command inject…
- 6.3CVE-2026-112240EPSS 0.4%
The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was also not verified in a way that resisted guessing. An unauthenticated attacker could use this to access files u…
- 7.2CVE-2026-112239EPSS 0.4%
The extension provides a backend endpoint that writes a submitted value into a submitted field of a submitted page record. It neither checks the user's permissions nor limits which fields can be changed. Any authenticated backend user can …
- 8.7CVE-2026-112238EPSS 0.4%
The file search of the extension builds its database conditions by wrapping the search term in quotes itself. Only the wildcard characters of the LIKE operator are escaped, quote characters are not. A crafted search term can therefore leav…
- 6.9CVE-2026-112237EPSS 0.4%
The extension provides a public proxy endpoint that fetches a URL on behalf of the visitor. For one HTTP request method, the endpoint does not apply the authorization check that protects the other methods, so the URL it fetches is fully co…