690005 matches found
CVE-2026-113466
A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue affects the function globalDeploymentID/SessionTokenAuthenticate of the file cmd/common-main.go of the component Embedded Console. Such manipulation leads to use of hard-coded cryptographic key . It...
CVE-2026-35196
CVE-2026-35196 · Chamilo LMS · OS Command Injection → RCE Researcher: K Disclosure Type: Responsible Disclosure Status: Patched Affected Product: Chamilo LMS 2.0 Confirmed on v1.11.32 📋 Vulnerability Summary Field| Details ---|--- Product| Chamilo LMS Affected Version| 2.0 Confirmed on v1.11.32...
GHSA-259R-337F-4RFW Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress
Signed Integer Overflow in s2.NewDict Summary A signed integer overflow vulnerability in s2.NewDict allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode is subsequently called, the overflowed negati...
Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress
Signed Integer Overflow in s2.NewDict Summary A signed integer overflow vulnerability in s2.NewDict allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode is subsequently called, the overflowed negati...
CVE-2026-9198_exploit
CVE-2026-9198 — Langflow OSS Unauthenticated RCE Unauthenticated remote code execution in IBM Langflow OSS 1.0.0 – 1.10.0 on a default deployment. Chains two flaws: CVE-2026-9103 — GET /api/v1/autologin mints a SUPERUSER JWT to any caller with no credentials whenever AUTOLOGIN is enabled the...
CVE-2026-113411 Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme
A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Handler. The manipulation of the argument url results in improper authorization in handler for custom url scheme. The...
CVE-2026-113411
A vulnerability exists in Nerimity Desktop up to version 2.2.2 within the Window Open Handler component. Specifically, the shell.openExternal function in src/mainWindow.js fails to properly authorize custom URL schemes when the url argument is manipulated. This flaw allows for remote execution of...
CVE-2026-113411 Nerimity Desktop Window Open mainWindow.js shell.openExternal improper authorization in handler for custom url scheme
A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Handler. The manipulation of the argument url results in improper authorization in handler for custom url scheme. The...
EUVD-2026-105022
A vulnerability was found in Nerimity Desktop up to 2.2.2. Affected by this issue is the function shell.openExternal of the file src/mainWindow.js of the component Window Open Handler. The manipulation of the argument url results in improper authorization in handler for custom url scheme. The...
CLSA-2026-1792506479 TuxCare security update for @babel/plugin-transform-function-name (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-function-name to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792506480 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
CLSA-2026-1792506477 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792506478 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792506476 TuxCare security update for @babel/plugin-transform-function-name (2 CVEs)
TuxCare rebuilt @babel/plugin-transform-function-name to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...
CLSA-2026-1792506475 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.25.7-tuxcare.4...
CLSA-2026-1792506472 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
CLSA-2026-1792506470 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
CLSA-2026-1792506468 TuxCare security update for @babel/plugin-transform-function-name (1 CVE)
TuxCare rebuilt @babel/plugin-transform-function-name to address 1 CVE. Fixed in 7.18.9-tuxcare.2...