14618 matches found
CVE-2026-14298
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to properly limit resource consumption when processing certain user-supplied input, which allows an authenticated user to cause a denial of service. Mattermost Advisory ID: MMSA-2026-00713...
CVE-2026-14298
CVE-2026-14298 affects Mattermost releases: 11.9.x ≤ 11.9.0, 11.8.x ≤ 11.8.4, 11.7.x ≤ 11.7.7, and 10.11.x ≤ 10.11.22. An authenticated user can trigger denial of service by causing resource exhaustion while processing certain user-supplied input. The CVE has a base score of 6.5 (MEDIUM) under CV...
CVE-2026-14298 Boards archive import endpoint allows resource exhaustion via zip bomb and file size limit bypass in Mattermost
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit decompressed content size and enforce the configured maximum file size in the Boards archive import handler, which allows an authenticated user to cause memory exhaustion or unbounded disk...
EUVD-2026-57742
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to properly limit resource consumption when processing certain user-supplied input, which allows an authenticated user to cause a denial of service. Mattermost Advisory ID: MMSA-2026-00713...
EUVD-2026-57600
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
Linux Distros Unpatched Vulnerability : CVE-2026-66898
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations. When importing or restorin...
Vaulted Passkeys: A Device-Bound Proposal for Authenticated Credential Export and Import
Hardware authenticators deliberately resist private-key extraction, yet replacement, disaster recovery, and controlled migration create a legitimate need for portability. Existing guidance for device-bound credentials commonly reduces recovery risk by registering an additional authenticator befor...
CVE-2026-72855: Server-Side Request Forgery (SSRF)
Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query import and REST query execution that allow authenticated builder-level users to bypass DNS pinning protections through DNS rebinding attacks. Attackers can configure hostnames that resolve to public...
CVE-2026-14298: Improper Handling of Highly Compressed Data (Data Amplification)
Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 fail to limit decompressed content size and enforce the configured maximum file size in the Boards archive import handler, which allows an authenticated user to cause memory exhaustion or unbounded disk...
CVE-2026-45774: Improper Limitation of a Pathname to a Restricted Directory
compliance-trestle is a tooling platform for managing compliance as code. Prior to versions 3.12.2 and 4.0.3, the compliance-trestle library's profile import mechanism resolves trestle:// URIs and relative file paths by joining them with trestleroot and calling .resolve, but performs no boundary...
CVE-2026-46382 Meeting Room Booking System has server-side request forgery in import functionality
The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...
CVE-2026-46382 Meeting Room Booking System has server-side request forgery in import functionality
The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...
CVE-2026-46382 Meeting Room Booking System has server-side request forgery in import functionality
The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...
CVE-2026-46382
MRBS prior to v1.12.2 is vulnerable to server-side request forgery during import, where a user-supplied private/local URI can be fetched without validation. The fixed version is v1.12.2; no workaround is listed in the provided documents. Remediation: upgrade to v1.12.2 or newer as stated in the s...
CVE-2026-10534
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
Duplicate Advisory: Second-order SSTI to arbitrary SQL via attribute-view template column (queryBlocks): malicious imported package executes SQL on victim kernel
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-x67c-8pwr-m8g3. This link is maintained to preserve external references. Original Description SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns...
CVE-2026-10534
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
CVE-2026-10534 IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
CVE-2026-10534
IBM Db2 11.5.0–11.5.9 and 12.1.0–12.1.5 suffer a CWE-121 stack-based buffer overflow in the IXF IMPORT parser, exploitable locally for full confidentiality, integrity, and availability impact. IBM provides interim security updates: Security Update #87984 for V11.5.9 (APAR DT471716), #86025 for V1...