53603 matches found
EUVD-2026-44804
NocoBase backup restore schema name allows command injection...
CVE-2026-63379 Libevent: HTTP Header smuggling
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c through evhttpreadtrailer and merges them into request headers. The fix introduces evhttpparseheadersimpl and a temporary trailer header list. An unauthenticated remote...
CVE-2026-73253 Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching
Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildcard certificate for a parent domain can impersonate deeper subdomains to a client using the built-in TLS stack. The mgtlsverifycertsan and mgtlsverifycertcn functions in...
CVE-2026-73259
CVE-2026-73259 is a reflected cross-site scripting (XSS) vulnerability in Mongoose , an embedded web server and network library, affecting versions prior to 7.22 . The flaw resides in the mg_http_serve_dir() and listdir() functions in src/http.c, which insert a percent-decoded request URI into th...
CVE-2026-73258
Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can place a lone carriage return or line feed in multipart input processed by mghttpnextmultipart in src/http.c. The loops comparing sb and sb + 1, and sh2 and sh2 + 1, use an incorrect AND condition and stop...
ROOT-OS-DEBIAN-11-CVE-2025-5318 CVE-2025-5318 in libssh - Patched by Root
Root has patched CVE-2025-5318 in the libssh package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-5372 CVE-2025-5372 in libssh - Patched by Root
Root has patched CVE-2025-5372 in the libssh package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-68431 CVE-2025-68431 in libheif - Patched by Root
Root has patched CVE-2025-68431 in the libheif package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-10911 CVE-2025-10911 in libxslt - Patched by Root
Root has patched CVE-2025-10911 in the libxslt package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-7598 CVE-2026-7598 in libssh2 - Patched by Root
Root has patched CVE-2026-7598 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-55200 CVE-2026-55200 in libssh2 - Patched by Root
Root has patched CVE-2026-55200 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-66035 CVE-2026-66035 in libssh2 - Patched by Root
Root has patched CVE-2026-66035 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-66033 CVE-2026-66033 in libssh2 - Patched by Root
Root has patched CVE-2026-66033 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-15661 CVE-2025-15661 in libssh2 - Patched by Root
Root has patched CVE-2025-15661 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-63490
Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.3, com.github.jknack.handlebars.springmvc.SpringTemplateLoader resolves attacker-influenced Spring MVC view names through Spring ResourceLoader without the path-containment validation used by other URL-bas...
ROOT-OS-DEBIAN-11-CVE-2024-29157 CVE-2024-29157 in hdf5 - Patched by Root
Root has patched CVE-2024-29157 in the hdf5 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-32621 CVE-2024-32621 in hdf5 - Patched by Root
Root has patched CVE-2024-32621 in the hdf5 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-29164 CVE-2024-29164 in hdf5 - Patched by Root
Root has patched CVE-2024-29164 in the hdf5 package for Root:Debian:11. Multiple fixed versions available...