EUVD-2026-90298

A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be displayed to anonymous visitors, but it returned more data than the form itself required. Anyone who knew the web address of a published form could potentially retrieve th...

CVE-2026-102121 Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor

A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be displayed to anonymous visitors, but it returned more data than the form itself required. Anyone who knew the web address of a published form could potentially retrieve th...

CVE-2026-102121

The Kiteworks Secure Data Forms product contains a vulnerability in its Advanced Forms component where the form-rendering interface is reachable without authentication. While published forms are intended for anonymous visitors, the interface returns excessive data beyond what is required for the ...

CVE-2026-102131 Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity

Kiteworks Email Protection Gateway rejected certain configuration settings, but its validation did not recognize every form in which they could be supplied. An authenticated administrator could potentially use an unrecognized form to have a file of their choosing written to the gateway and...

CLEANSTART-2025-ST85629 Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service

Security vulnerability affects the containerd package. Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service...

CVE-2026-62308

Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.6, Tugtainer allows an authenticated user to make the backend server send outbound HTTP requests to arbitrary user-supplied URLs through the notification test endpoint. The /settings/testnotification...

EUVD-2026-90194

Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.6, Tugtainer allows an authenticated user to make the backend server send outbound HTTP requests to arbitrary user-supplied URLs through the notification test endpoint. The /settings/testnotification...

CVE-2026-62308 Tugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpoint

Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.30.6, Tugtainer allows an authenticated user to make the backend server send outbound HTTP requests to arbitrary user-supplied URLs through the notification test endpoint. The /settings/testnotification...

CVE-2026-100258

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...

CVE-2026-100253

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL...

CVE-2026-100258

In JetBrains YouTrack versions prior to 2026.2.18991 , a missing authorization vulnerability allows users with read-only privileges to access and read sensitive project settings . The impact is categorized as a low confidentiality risk (CVSS 3.1 score of 4.3). No specific exploit details or in-th...

CVE-2026-100258

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...

CVE-2026-100258

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...

EUVD-2026-90002

In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed read-only users to read project settings...

EUVD-2026-89998

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection in Pipeline Git connection settings...

CVE-2026-100253

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL...

CVE-2026-100253

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL...

EUVD-2026-89997

In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings Kotlin DSL...

CVE-2026-100253

JetBrains TeamCity versions prior to 2026.2 , 2026.1.4 , and 2025.11.8 are vulnerable to a sandbox escape leading to code execution . The root cause is located within the versioned settings Kotlin DSL . No specific exploit details or in-the-wild exploitation information are provided in the docume...

firefox: thunderbird: Mitigation bypass in the Remote Settings Client component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Remote Settings Client component...