72915 matches found
CVE-2026-19284
A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...
EUVD-2026-54781
A weakness has been identified in andreahaku llmmemorymcp up to f11dc8bcff3ff8cf943a2945f99ff3b0bdc8a6d0. This impacts the function auto.capture of the file src/autolearn/GitHooksManager.ts of the component llmmemorymcp. Executing a manipulation of the argument hash can lead to command injection...
CVE-2026-71556
creationtimestamp| type| source ---|---|--- 2026-08-08 11:33:31+00:00| seen| https://gist.github.com/alon710/96191d79926d3727c699122d4f73553a...
GHSA-HC8V-WWC9-VGXM
creationtimestamp| type| source ---|---|--- 2026-08-08 11:33:31+00:00| seen| https://gist.github.com/alon710/96191d79926d3727c699122d4f73553a...
CVE-2026-71557 vulnerabilities
Vulnerabilities for packages: trivy, goreleaser, guac, tfsec, gitaly, gitea, kubevela, snyk-cli, act, bom, cerbos, grype, xeol, external-secrets-operator, steampipe, kots, pulumi-language-dotnet, pulumi-language-java, trivy-operator, argo-cd, argo-workflows, crossplane, gitsign,...
CGA-5RCR-HJ5P-4FC7
Bulletin has no description...
CVE-2026-19270
A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...
CVE-2026-63220
creationtimestamp| type| source ---|---|--- 2026-08-08 06:36:21+00:00| seen| https://gist.github.com/alon710/8161c68753a945887582acb72752fba7...
CVE-2026-14231
creationtimestamp| type| source ---|---|--- 2026-08-08 06:18:14+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mskgbcinlw2o 2026-08-09 02:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msmjd25xw52y...
GHSA-GM37-52C6-37MW
creationtimestamp| type| source ---|---|--- 2026-08-08 02:32:35+00:00| seen| https://gist.github.com/alon710/6f3e0768fc0386f4c965af62333fef78...
ECHO-C1F2-5B8F-BFA5
Bulletin has no description...
EulerOS 2.0 SP11 : gnutls (EulerOS-SA-2026-3067)
According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in gnutls. This vulnerability occurs because gnutls performs case-sensitive comparisons of nameConstraints labels, specifically f...
CVE-2026-58262
creationtimestamp| type| source ---|---|--- 2026-08-07 23:00:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/curgxorgfb4gn...
CVE-2026-47127
Summary: Ghostfolio prior to 3.4.0 allowed any authenticated user to self-grant a 1-year Premium subscription via the Stripe checkout success callback at GET /api/v1/subscription/stripe/callback?checkoutSessionId=, which unconditionally assigns the session’s client_reference_id without checking s...
Exploit for CVE-2026-64638
No d...
GHSA-5P4M-2WFM-XMQJ
creationtimestamp| type| source ---|---|--- 2026-08-07 22:06:55+00:00| seen| https://gist.github.com/gomesalexandre/8cd74b41b9830109d823dcb777041502 2026-09-03 19:24:03+00:00| seen| https://gist.github.com/konard/05d19a59942ef51514e30abcc55dbc13 2026-09-03 20:23:57+00:00| seen|...
CVE-2026-70623
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CGA-P833-R6G2-379X
Bulletin has no description...