XWiki Platform - Information Disclosure

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. id: CVE-2025-55747 info: name: XWiki Platform - Information Disclosure author: Redmomn...

Dgraph <= 25.3.2 - Admin Token Disclosure

Dgraph = 25.3.2 contains an information disclosure caused by unauthenticated access to the /debug/vars endpoint , which publishes the cmdline variable including the --security token= flag, letting unauthenticated remote attackers retrieve the admin token and access admin-only endpoints, exploit...

CVE-2026-16239 affecting package postgresql for versions less than 16.15-1

CVE-2026-16239 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14679 affecting package postgresql for versions less than 16.15-1

CVE-2026-14679 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-46600 affecting package golang for versions less than 1.26.6-1

CVE-2026-46600 affecting package golang for versions less than 1.26.6-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73075 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73075 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-18503 affecting package python3 for versions less than 3.12.14-1

CVE-2026-18503 affecting package python3 for versions less than 3.12.14-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-75935 Memory-amplification denial of service via declared-length preallocation in Amazon ion-java

Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation. To remediate this issue, users shou...

CVE-2026-75090

A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convertgguftohftokenizer of the file mistralrs-core/src/gguf/gguftokenizer.rs of the component GGUF Tokenizer. The manipulation of the argument eostokenid/bostokenid/unknowntokenid results...

EUVD-2026-60035

A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component Money Transfer Handler. This manipulation causes time-of-check time-of-use. The attack may be initiated remotely. A hig...

Security Bulletin: Code Injection Vulnerability in Code Validation Endpoint

Summary A code injection vulnerability was identified in the code validation endpoint that allowed authenticated users to execute arbitrary code on the server. The vulnerability existed in the validation logic which compiled and executed function definitions to check for import errors. Attackers...

CVE-2026-63810 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-63810 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68414 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68414 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68432 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68432 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64561 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64561 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64482 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64482 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68116 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68116 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-68444 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-68444 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64552 affecting package kernel for versions less than 6.6.145.2-1

CVE-2026-64552 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-64598 affecting package kernel for versions less than 6.6.150.1-1

CVE-2026-64598 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...