92655 matches found
CVE-2026-101309
The xHCI USB 3 device model did not validate or save the event ring size provided by the guest. The size was re-read from guest memory on each use, and Transfer Request Block TRB fields were loaded without protection against concurrent modification by the guest. This race condition could be...
CVE-2026-101309 Multiple vulnerabilities in bhyve device models
The xHCI USB 3 device model did not validate or save the event ring size provided by the guest. The size was re-read from guest memory on each use, and Transfer Request Block TRB fields were loaded without protection against concurrent modification by the guest. This race condition could be...
CVE-2026-41544
The software QcalAgent is vulnerable to a path traversal vulnerability (CWE-22). If an attacker gains a user account, they can exploit this flaw to read the contents of unexpected files or system data. One source indicates the vulnerability specifically affects the /calapi/renameUpload endpoint, ...
CVE-2026-41544 Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint
A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.10 and...
CVE-2026-3712
The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header. This makes it possible for...
EUVD-2026-101823
The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header. This makes it possible for...
CVE-2026-3712 PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameter
The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header. This makes it possible for...
CVE-2026-3712
The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) in all versions up to and including 3.10 . The root cause is that the scripts service endpoint dynamically constructs its URL whitelist from the attacker-controlled HTTP 'Host' header . This allows unauthentic...
CVE-2026-3712 PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameter
The PhastPress plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.10 This is due to the scripts service endpoint constructing its URL whitelist dynamically from the attacker-controlled HTTP 'Host' header. This makes it possible for...
Improper Protection of Alternate Path
Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Improper Protection of Alternate Path via the find function in lib/util/host-rules.ts, where administrator-configured HTTP headers such as authentication credentials for one host can be sent to a...
Server-side Request Forgery (SSRF)
Overview renovate is a dependency updater. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via outbound HTTP requests in lib/util/http/host-guard.ts and the broader HTTP layer, where an attacker-controlled configuration value such as a customDatasources URL or...
CLEANSTART-2026-WM37561 Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL
Security vulnerability affects the nfs-subdir-external-provisioner package. The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL...
CLEANSTART-2026-BG17653 In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present)
Security vulnerability affects the kafka package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...
CVE-2026-18660: Improper Handling of Case Sensitivity
In Eclipse Jetty, across various versions of jetty-server, and jetty-proxy, the host whitelist/blacklist is case-sensitive, and would allow hosts through that only differ by case...
PT-2026-122697
Security vulnerability affects the kafka package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...
EUVD-2026-102130
An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in DefaultWebClient...
UBUNTU-CVE-2026-103503
Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set cacertspath to a CA store that leaves that CA out...
PT-2026-114869
Name of the Vulnerable Software and Affected Versions Eclipse Jetty affected versions not specified Description In jetty-server and jetty-proxy, the host whitelist and blacklist mechanisms are case-sensitive. This allows hosts to bypass security filters if they differ only by the casing of the...
PT-2026-122850
Security vulnerability affects the nfs-subdir-external-provisioner package. The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL...
Rocky Linux 9.6 [TuxCare] Security Update: buildah / buildah-tests Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792085312)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792085312 advisory. - Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due t...