CVE-2026-20347

creationtimestamp| type| source ---|---|--- 2026-08-10 12:45:05+00:00| seen| https://www.acn.gov.it/portale/w/risolte-vulnerabilita-in-clamav-2 2026-08-10 13:20:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3msq6vaybd72j 2026-08-12 04:45:22+00:00| seen|...

CVE-2026-19383

A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shellexec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possibl...

CVE-2026-19384 SourceCodester Simple Doctors Appointment System ajax.php set_appointment sql injection

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=setappointment. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has...

CVE-2026-19383

A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shellexec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possibl...

EUVD-2026-54982

A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1. This impacts the function shellexec of the file /app/saipackage/install/upload of the component Plugin Upload Endpoint. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possibl...

ROS-20260810-73-0029

The vulnerability in libssh2 is related to integer overflow. Exploitation of this vulnerability can be carried out remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-59088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP. A signed integer overflow vulnerability exists in the file-fli plugin when processing FLI image files. This occurs due to an incorrect...

The vulnerability of the `install_and_activate_plugin_from_external()` function of the GutenKit plugin – Page Builder Blocks, Patterns, and Templates for the Gutenberg Block Editor, a content management system for WordPress – allows attackers to upload arbitrary files.

The vulnerability of the installandactivatepluginfromexternal function of the GutenKit plugin – which is used for Page Builder Blocks, Patterns, and Templates in the Gutenberg Block Editor of the WordPress content management system – is related to the lack of authentication. Exploiting this...

The vulnerability of the WebExtensions component in the Firefox web browser and the Thunderbird email client allows a hacker to compromise data integrity.

The vulnerability of the WebExtensions component in the Firefox web browser and the Thunderbird email client involves bypassing authentication processes through spearfishing. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

CVE-2026-19376 Uasoft Badaso File API api.php class permission

A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class of the file src/Routes/api.php of the component File API. The manipulation leads to permission issues. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-19362

A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This issue affects the function parsetokenfromheader of the file src/parsetokenfromheader.rs of the component Authorization Header Parsing. The manipulation of the argument authorizationtoken leads to denial of service. Remote...

CVE-2026-19363

CVE-2026-19363 affects the lmammino oidc-authorizer package up to version 0.4.0. The flaw resides in the unwrap function of src/handler.rs in the Fixed Message Handler, where manipulating the jwtClaims argument enables deserialization and remote execution. Public exploitation is noted, and the ve...

EUVD-2026-54933

A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This issue affects the function parsetokenfromheader of the file src/parsetokenfromheader.rs of the component Authorization Header Parsing. The manipulation of the argument authorizationtoken leads to denial of service. Remote...

CVE-2026-19359 nxp-auto-goldvip gvip Lambda Function SitewiseCustomFunction access control

A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0. Affected by this issue is the function SitewiseCustomFunction of the component Lambda Function Handler. Such manipulation leads to improper access controls. The attack can be launched remotely. Upgrading to version...

CVE-2026-19358 3CORESec Trapdoor DefaultFunction access control

A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected by this vulnerability is the function DefaultFunction. This manipulation causes improper access controls. The attack can be initiated remotely. The vendor was contacted early about this disclosure...

CVE-2026-19358

The CVE-2026-19358 entry concerns a weakness in 3CORESec Trapdoor, affecting the DefaultFunction up to version 1.2.2. The manipulation leads to improper access controls, with the attack described as remotely initiable over the network. Connected documents corroborate the affected component and th...

CVE-2026-19353

DedeCMS up to 5.7.118 UTF8SP2 contains a vulnerability in the Installation Wizard: the _4_Setup function of install/index.php enables file inclusion. Exploitation is possible remotely and described as high complexity with low privilege requirements (network vector, low impact on confidentiality/i...

CVE-2026-19347

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /viewdoctor.php. Such manipulation of the argument delid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might b...

CVE-2026-19350

A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected is the function fail of the file htdocs/takepos/invoice.php of the component TakePOS Module. Such manipulation leads to missing authorization. The attack may be performed from remote. The name of the patch is...

EUVD-2026-54915

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...