CVE-2026-55514

A flaw was found in vLLM, a library for Large Language Model LLM inference and serving. A remote attacker, authorized to make a /v1/completions request, can send a specially crafted prompt embeds payload. This action causes the EngineCore to fail an assertion and fatally crash, leading to a Denia...

Juniper Junos OS Vulnerability (JSA110079)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA110079 advisory. - An Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on MX Series allows an unauthenticate...

Juniper Junos OS Vulnerability (JSA110090)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA110090 advisory. - A Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the packet forwarding engine PFE of Juniper Networks Junos OS...

CVE-2026-6820: Improper Neutralization of Input During Web Page Generation

The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 1.8.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...

CVE-2026-6818: Improper Neutralization of Input During Web Page Generation

The VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'specialrequests' parameter in all versions up to, and including, 1.8.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...

Juniper Junos OS Vulnerability (JSA110080)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA110080 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on QFX10000 Series allows an...

Amazon Linux 2 : docker, --advisory ALAS2ECS-2026-131 (ALASECS-2026-131)

The version of docker installed on the remote host is prior to 25.0.16-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-131 advisory. x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN...

Juniper Junos OS Vulnerability (JSA110092)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA110092 advisory. - An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine pfe of Juniper Networks Junos OS on EX Series devices allows an authenticated...

Why Unity Remains the Most Popular Engine for Mobile Games

Learn why Unity is still a trusted engine for mobile games, from faster prototyping and Android and iOS support to tools that help studios scale after releases...

EUVD-2026-42091

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/datasetData/previewSql endpoint lacks the mandatory @DePermit permission validation annotation, allowing any authenticated user to specify datasourceId=-1, access the built-in engine database, execute...

CVE-2026-53730 DataEase: Unauthorized Access to Engine Database via previewSql Endpoint

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/datasetData/previewSql endpoint lacks the mandatory @DePermit permission validation annotation, allowing any authenticated user to specify datasourceId=-1, access the built-in engine database, execute...

CVE-2026-53730 DataEase: Unauthorized Access to Engine Database via previewSql Endpoint

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/datasetData/previewSql endpoint lacks the mandatory @DePermit permission validation annotation, allowing any authenticated user to specify datasourceId=-1, access the built-in engine database, execute...

CVE-2026-53730 DataEase: Unauthorized Access to Engine Database via previewSql Endpoint

DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/datasetData/previewSql endpoint lacks the mandatory @DePermit permission validation annotation, allowing any authenticated user to specify datasourceId=-1, access the built-in engine database, execute...

CVE-2026-53730

CVE-2026-53730 — DataEase : Affected product is DataEase (open source data visualization/analysis tool). Before version 2.10.24, the /de2api/datasetData/previewSql endpoint lacks the mandatory @DePermit permission validation, allowing any authenticated user to specify datasourceId=-1, access the ...

MariaDB: DATA / INDEX DIRECTORY Abuse

A vulnerability was identified in the DATA DIRECTORY and INDEX DIRECTORY functionality of a database system. Users with ordinary schema-level privileges were able to write arbitrary data to attacker-chosen locations by exploiting path traversal issues in how external table directories were...

autodist (>=0.7.0rc1, <=0.7.0rc2), sage-engine (>=2.1.0, <=2.2.0) potentially affected by CVE-2026-0994 via protobuf (3.11.0)

protobuf PYPI version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - autodist =0.7.0rc1, =2.1.0, =2.2.0 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

bigquery-fdw (>=2.1.1, <=2.1.2), bxsolana-trader (1.7.0) +6 more potentially affected by CVE-2026-0994 via protobuf (4.21.8)

protobuf PYPI version 4.21.8 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bigquery-fdw =2.1.1, =0.0.13, =0.2.0, =0.0.2, =0.4.0, =0.2.0, =0.1.0, =0.1.1 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

rarecrowds (>=0.0.1, <=0.0.5), sage-engine (2.3.0) +1 more potentially affected by CVE-2026-0994 via protobuf (3.15.7)

protobuf PYPI version 3.15.7 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - rarecrowds =0.0.1, =0.0.5 - sage-engine 2.3.0 - training-grounds 0.0.2 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-1805...

fair-llm (>=0.2.0, <=0.6.2), geo-importer (>=0.0.1b1, <=0.0.1b914) +4 more potentially affected by CVE-2026-24688 via pypdf (5.6.0)

pypdf PYPI version 5.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - fair-llm =0.2.0, =0.0.1b1, =30.0.5, =30.0.7 - textspitter 0.4.0b0 Source cves: CVE-2026-24688 Source advisory: OSV:PYSEC-2026-1827...

easyvvuq (>=0.5.2.1, <=0.5.2.2), feature-engine (0.3.0) +11 more potentially affected by CVE-2025-71176 via pytest (4.3.1)

pytest PYPI version 4.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - easyvvuq =0.5.2.1, =0.0.3, =0.1.3, =0.10.7, =2019.3.12, =0.0.11, =0.1.2, =0.1.0.dev2210, =0.1.1 Source cves: CVE-2025-71176 Source advisory:...