40452 matches found
CVE-2026-57163: Stack-based Buffer Overflow
PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...
CVE-2022-26961
Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NPIBCF-NATUP-01/NMSCI-WebGui/backuprestore.jsp and NPIBCF-MIBER-03/NMSCI-WebGui/storage.jsp via the name parameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The malicious payload will then ...
CVE-2022-26961
Italtel NetMatch-S 5.0.0-20200703 is vulnerable to Multiple Stored XSS due to improper neutralization of input during web page generation. The flaw exists in the backup_restore.jsp and storage.jsp components (under respective paths) via the name parameter . A malicious user can inject arbitrary J...
PT-2026-85421
The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.134 does not validate a user supplied file name before using it to build a write path, allowing administrators to write files of permitted types to arbitrary locations on the server and to overwrite existing files...
CVE-2026-16892: Improper Authentication
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authentication during service-name matching...
CVE-2022-26961
Italtel NetMatch-S 5.0.0-20200703 allows Multiple Stored XSS under NPIBCF-NATUP-01/NMSCI-WebGui/backuprestore.jsp and NPIBCF-MIBER-03/NMSCI-WebGui/storage.jsp via the name parameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The malicious payload will then ...
PT-2026-85764
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to an off-by-one write in the LPD queue name parser...
PT-2026-85398
A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument file name leads to path traversal. The attack may be performed from remote. The...
gitpython: GitPython: Arbitrary code execution via config-name injection
A flaw was found in GitPython. This vulnerability allows attackers to inject malicious configuration options by manipulating option names within the option-name validator. By injecting special characters, an attacker can forge arbitrary git-config directives, potentially leading to arbitrary code...
BASM (Broken Authentication & Session Management) org.bouncycastle:bcprov-jdk18on Dependency in Jira Software Data Center
This is a vulnerability in a non-Atlassian Jira Software dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity BASM Broken Authentication & Session Management vulnerability was introduced in versions 9.12.1, 10.0.0, 10.1.1,...
CVE-2026-82526
creationtimestamp| type| source ---|---|--- 2026-09-03 18:50:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7nqraoi4wx5rc 2026-09-03 19:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mun7unyeuf2o 2026-09-03 20:07:54+00:00| seen|...
GHSA-2W86-XFRC-G85R Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator
Summary orval, when generating MSW mocks output.mock: true, emits each schema property name as a single-quoted object key in the mock factory WITHOUT escaping the single quote. A ' in a property name closes the key and lands in object-literal context, where an injected computed property key expr ...
Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator
Summary orval, when generating MSW mocks output.mock: true, emits each schema property name as a single-quoted object key in the mock factory WITHOUT escaping the single quote. A ' in a property name closes the key and lands in object-literal context, where an injected computed property key expr ...
Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli
Summary orval's zod client emits each query parameter name as a double-quoted key in the generated zod.object... request-validation schema WITHOUT escaping the double quote. A " in the query parameter name closes the key and lands in object-literal context, where an injected computed property key...
EUVD-2026-70653
R2R through 3.6.6 contains a stacked SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL statements by manipulating the index name parameter in the vector index creation endpoint. The index name is interpolated directly into a CREATE INDEX statement via stri...
Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client
Summary orval's zod client emits each header parameter name as a double-quoted key in the generated zod.object... request-validation schema WITHOUT escaping the double quote. A " in the header parameter name closes the key and lands in object-literal context, where an injected computed property k...
CVE-2026-84768
creationtimestamp| type| source ---|---|--- 2026-09-03 18:07:59+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mun264regj2w 2026-09-03 19:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mun53d4esm2w...
EUVD-2026-44774
Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match...
EUVD-2026-70520
A security vulnerability was discovered in Fleet's Helm template preprocessing where templates evaluated by the Fleet controller could reach network resources outside the management cluster. A user who can supply bundle content to a repository referenced by a GitRepo resource can cause the Fleet...
CVE-2026-84966
An incorrect numeric type conversion in the BSON document building component of the MongoDB C++ Driver may cause a length value to be interpreted incorrectly. When an application supplies an extremely large, non-terminated field name to the builder, the library may read memory outside the intende...