CVE-2025-48504

Operation on a resource after expiration or release in the Secure Encrypted Virtualization SEV firmware could allow a malicious hypervisor to manipulate metadata pages potentially resulting in the loss of confidentiality and integrity of guest memory...

CVE-2026-106025

The Cargo Shipping Location for WooCommerce WordPress plugin (versions 4.0.0 through 5.7.1) contains a vulnerability where a REST API endpoint fails to properly restrict access. Because the endpoint relies on an attacker-controllable value for authorization, unauthenticated users can manipulate o...

CVE-2026-119759 TrailBase 0.28.2 < 0.35.10 IDOR via Record API File Column

TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference in std.FileUpload columns, where the Record API accepts attacker-supplied object-store file ids on insert and update without ownership validation. An authenticated attacker who can read a victim’s row can recover its...

CVE-2026-119759: trailbaseio trailbase: TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated…

TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another...

PT-2026-141118

TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can reference another...

[SECURITY] Fedora 45 Update: libkexiv2-26.08.2-1.fc45

Libkexiv2 is a wrapper around Exiv2 library to manipulate pictures metadata as EXIF IPTC and XMP...

CVE-2026-55775

A flaw was found in OpenBao, an identity-based secrets management system. An authenticated user with specific permissions on /sys/namespaces/root within a non-root namespace could exploit a vulnerability in the namespace path canonicalization process. This flaw allows the user to perform...

DEBIAN-CVE-2026-88016

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, when backend/local runs with --links, a source .rclonelink object can plant a symlink in the destination and later directory metadata is applied through that path...

CVE-2026-49431

The OpenZFS component in FreeBSD contains an access control deficiency in the ZFS_IOC_SET_PROP ioctl handler, used by zfs-set(8) . This flaw allows an unprivileged local user to incorrectly set the internal ZFS metadata flag $hasrecvd on a dataset, falsely indicating that the dataset received pro...

CVE-2026-73652

vantage6 is an open-source infrastructure for privacy preserving analysis. In version 5.0.2 and earlier, the algorithm-store edit permission lacks an ownership check, allowing one algorithm developer to alter another developer's algorithm while it is pending or under review. The attacker can chan...

OPENSUSE-SU-2026:21393-1 Security update for gawk

This update for gawk fixes the following issues: - CVE-2026-40467: use-after-free vulnerability within the dogetlineredir routine could lead to a program crash bsc1271351. - CVE-2026-40468: use-after-free vulnerability in gawk's "io.c" file could permit heap metadata manipulation and host memory...

GHSA-XC8P-9RR6-97R2 Open WebUI vulnerable to Stored XSS via iFrame in citations model

Summary Manually modifying chat history allows setting the html property within document metadata. This causes the frontend to enter a code path that treats document contents as HTML, and render them in an iFrame when the citation is previewed. This allows stored XSS via a weaponised document...

EUVD-2026-38746

Flowise before 3.1.0 npm package flowise, versions 3.0.13 and earlier uses a weak hardcoded default value 'Secre$t' for the TOKENHASHSECRET environment variable in packages/server/src/enterprise/utils/tempTokenUtils.ts when the variable is not configured. This secret derives the AES-256-CBC key...

CVE-2026-56269

Flowise before 3.1.0 npm package flowise, versions 3.0.13 and earlier uses a weak hardcoded default value 'Secre$t' for the TOKENHASHSECRET environment variable in packages/server/src/enterprise/utils/tempTokenUtils.ts when the variable is not configured. This secret derives the AES-256-CBC key...

PT-2026-71934

Name of the Vulnerable Software and Affected Versions OpenZFS affected versions not specified Description An access control flaw exists in the ZFS IOC SET PROP ioctl handler, used by zfs-set8. This issue allows an unprivileged local user to incorrectly set metadata on a dataset, specifically the...

CVE-2026-42812

In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table and which table version to read. "write.metadata.path" is an optional table property that tells Polaris where to write those metadata files. For a table already registered in a...

CVE-2026-41267

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.0, an improper mass assignment JSON injection vulnerability in the account registration endpoint of Flowise Cloud allows unauthenticated attackers to inject server-managed fields and nested objec...

CVE-2026-40260

CVE-2026-40260 affects the Python library pypdf (formerly PyPDF2). The issue arises when parsing manipulated XMP metadata declarations within a PDF, causing excessive memory (RAM) usage for memory-constrained parsing workloads. Impact is described as potential large memory consumption during XMP ...

CVE-2026-40260 pypdf: Manipulated XMP metadata entity declarations can exhaust RAM

pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker who exploits this vulnerability can craft a PDF which leads to large memory usage. This requires parsing the XMP metadata. This issue has...

CVE-2026-33173

A flaw was found in Rails Active Storage. A remote attacker, acting as a direct-upload client, can exploit this vulnerability by manipulating metadata during file uploads. By setting internal flags, the attacker can bypass the system's automatic MIME Multipurpose Internet Mail Extensions type...