c3p0: c3p0: Arbitrary Code Execution via deserialization of crafted objects

A flaw was found in c3p0, a Java Database Connectivity JDBC Connection pooling library. This vulnerability allows an attacker to achieve arbitrary code execution by providing maliciously crafted Java-serialized objects or javax.naming.Reference instances. By manipulating the userOverridesAsString...

c3p0: c3p0: Arbitrary Code Execution via deserialization of crafted objects

A flaw was found in c3p0, a Java Database Connectivity JDBC Connection pooling library. This vulnerability allows an attacker to achieve arbitrary code execution by providing maliciously crafted Java-serialized objects or javax.naming.Reference instances. By manipulating the userOverridesAsString...

SUSE-SU-2026:1970-1 Security update for php-composer2

This update for php-composer2 fixes the following issues - CVE-2026-40176: command injection via malicious Perforce repository definition bsc1262254. - CVE-2026-40261: command injection via malicious Perforce source reference/url bsc1262255. Changes for php-composer2: - version update to 2.2.27...

CVE-2026-6342

Mattermost plugins vulnerable to a namespace prefix-matching bypass. Affected: Mattermost Plugins versions

PT-2026-41688

Name of the Vulnerable Software and Affected Versions CI4MS versions prior to 0.31.9.0 Description Stored Cross-Site Scripting XSS exists due to a failure in the html purify validation rule used to sanitize blog post bodies. The rule relies on by-reference mutation ?string &$str, but the underlyi...

MINI-PRPH-2C56-3GWX

Bulletin has no description...

MINI-GMR9-9QJ8-Q7PG

Bulletin has no description...

MINI-XV97-6F42-M547

Bulletin has no description...

MINI-V646-454J-MFWC

Bulletin has no description...

MINI-JWF3-38WQ-VRJP

Bulletin has no description...

MINI-MGXJ-7546-CXHQ

Bulletin has no description...

MINI-5R3H-V7V6-V8FQ

Bulletin has no description...

MINI-4624-8HPG-RCJ5

Bulletin has no description...

MINI-767R-9MHJ-HRPP

Bulletin has no description...

MINI-M4RQ-GH8P-22G5

Bulletin has no description...

MINI-7H2P-GJ9F-4VP9

Bulletin has no description...

MINI-2QC4-M2QW-8HC6

Bulletin has no description...

Improper Access Control

getgrav/grav-plugin-api is vulnerable to Improper Access Control. The vulnerability is due to an insecure direct object reference and flawed permission update logic in UsersController::update, which allows an attacker to escalate privileges to Super Administrator and gain full system access...

Server-Side Request Forgery (SSRF)

FrontMCP is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to unsafe dereferencing of $ref pointers in OpenAPI specifications without URL restrictions, which allows an attacker to trigger requests to internal network resources or read local files through malicious OpenAP...

CVE-2026-44504

Aegra is a drop-in replacement for LangSmith Deployments. Prior to 0.9.7, with multiple authenticated users on a shared instance are vulnerable to a cross-tenant IDOR. Any authenticated attacker, given another user's threadid, can execute graph runs against the user's thread, read the user's full...