2059 matches found
CVE-2026-33212
Weblate is a web based localization tool. In versions prior to 5.17, the tasks API didn't verify user access for pending tasks. This could expose logs of in-progress operations to users who don't have access to given scope. The attacker needs to brute-force the random UUID of the task, so...
CVE-2026-42475
SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted on array to the joinOn function in BuildHelper.php...
CVE-2026-33214
Weblate is a web based localization tool. In versions prior to 5.17, the translation memory API exposed unintended endpoints, which in turn didn't enforce proper access control. This issue has been fixed in version 5.17. If users are unable to update immediately, they can work around this issue b...
CVE-2026-33440
Weblate is a web based localization tool. In versions prior to 5.17, the ALLOWEDASSETDOMAINS setting applied only to the first issued requests and didn't restrict possible redirects. This issue has been fixed in version 5.17...
CVE-2026-25621 Arista Edge Threat Management NGFW Reports Application Insecure Input Validation
A Reports application infrastructure vulnerability exists in Arista Edge Threat Management - Arista Next Generation Firewall NGFW due to insecure input validation. This issue uniquely affects version 17.4.0; earlier software releases are not exposed...
CVE-2026-39845
Weblate is a web based localization tool. In versions prior to 5.17, the webhook add-on did not utilize existing SSRF protections. This issue has been fixed in version 5.17. If developers are unable to update immediately, they can disable the webhook add-on as a workaround...
CVE-2026-44263
Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. This issue has been patched in version 5.17.1...
CVE-2026-44264
Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided content didn't properly sanitize some attributes. This issue has been patched in version 5.17.1...
CVE-2026-34393
Weblate is a web based localization tool. In versions prior to 5.17, the user patching API endpoint didn't properly limit the scope of edits. This issue has been fixed in version 5.17...
GHSA-VWJG-VPWQ-RXVV vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-26-openj9...
GHSA-WX45-VX6H-76CQ vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-26-openj9...
GHSA-RP3Q-RW9W-295J vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-26-openj9...
GHSA-P9XP-4JV8-8R8F vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-26-openj9...
GHSA-PFR6-J3GF-9M85 vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-26-openj9...
GHSA-P45X-6RJM-X9QF vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-26-openj9...
GHSA-PXHF-QG7H-8X8M vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-26-openj9...
GHSA-XXCM-X786-Q6GG vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-26-openj9...
GHSA-X7PQ-J293-X4P5 vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-26-openj9...
GHSA-RXF7-P2JR-3VF7 vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-26-openj9...
GHSA-Q4WQ-4WHJ-CXHX vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-26-openj9...