2888 matches found
CVE-2026-18423
Concrete CMS versions 9.0.0 through 9.5.2 contain an Insecure Direct Object Reference (IDOR) in the Express saved search preset delete and edit dialogs . An authenticated user holding only view permission on a single Express entity can permanently delete (with no undo) or rename saved search pres...
CVE-2026-76689
CVE-2026-76689 affects HPE Networking EdgeConnect SD-WAN Gateways , where a stack-based buffer overflow exists in the configuration processing logic. An authenticated remote attacker with administrative privileges can exploit the vulnerability by supplying specially crafted configuration data tha...
CVE-2026-81899
Concrete CMS 9.0.0 to 9.5.2 stored group folder names without sanitization and printed them unescaped on the Members Groups dashboard page, resulting in stored cross-site scripting. The add and edit group-folder handlers stored the submitted folder name without neutralizing HTML, and the group...
EUVD-2026-79127
Concrete CMS 9.0.0 to 9.5.2 stored group folder names without sanitization and printed them unescaped on the Members Groups dashboard page, resulting in stored cross-site scripting. The add and edit group-folder handlers stored the submitted folder name without neutralizing HTML, and the group...
EUVD-2026-78820
Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP por...
CVE-2026-81902
Concrete CMS 9 through 9.5.2 did not validate a CSRF token in the orphaned block removal panel action removeOrphanedBlocks. A remote attacker could craft a request that, when loaded by an authenticated user holding edit permission on the target page, deleted every block on that page's current...
Astra Linux – Vulnerability in Mariadb 10.3
MariaDB CONNECT Storage Engine Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected MariaDB installations. Authentication is required to exploit this vulnerability. The specific flaw resides in the processing ...
Astra Linux – Vulnerability in Mariadb 10.3
MariaDB CONNECT Storage Engine Use-After-Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected MariaDB installations. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of SQL...
EUVD-2026-76873
vLLM versions before 0.28.0 fail to validate audio sample rate headers in the transcription endpoint, allowing authenticated clients to bypass duration checks. Attackers can submit forged FLAC headers with inflated sample rates to trigger excessive memory allocation and crash the API server proce...
Apache Airflow exposes sensitive JSON Variable values through the Bulk Variables API
The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based shouldhidevalueforkey check which triggers on secret-suffixed key names like password / token / secret could not fire for JSON-decodable variable values. An authenticated UI/API user...
CVE-2026-86751
Snipe-IT before 8.7.0 fails to properly sanitize markdown image syntax in note fields, allowing authenticated users to read arbitrary server files and issue server-side HTTP requests. Attackers can submit markdown image syntax in checkout acceptance notes that survive HTML escaping, are expanded ...
WordPress Gallagher Website Design plugin <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin Gallagher Website Design versions = 2.6.4...
Progress Software Kemp LoadMaster escape_quotes Uninitialized Memory Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication is required to exploit this vulnerability. The specific flaw exists within the escapequotes function. The issue results from the lack of proper...
Linux Distros Unpatched Vulnerability : CVE-2026-82059
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal...
PT-2026-89173
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.6 through 0.11.0 Description An issue exists in the SafePlaywrightURLLoader component within backend/open webui/retrieval/web/utils.py affecting both sync and async request interceptors. The system validates a...
CVE-2026-83982
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-73499
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
CVE-2026-82065 Insufficient Validation of Storage Configuration Options in MongoDB Server Leads to Persistent Denial of Service via Corrupted Metadata
A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...
Koha Eval Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 8081 by default. The issue results from the lack of proper...