CVE-2026-82121

The HiRDB database software is affected by an Origin Validation Error vulnerability (CWE-346). This issue impacts multiple versions, including HiRDB Server Version 10 (from 10-00 before 10-12-01), Version 9 (09-00 through 09-66-22), and various Version 9(32) and Additional Function variants. The ...

CVE-2026-82121 Origin Validation Error Vulnerability in HiRDB

Origin Validation Error Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932: from 09-02 through...

EUVD-2026-110663

Origin Validation Error Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932: from 09-02 through...

CVE-2026-82122

A stack-based buffer overflow vulnerability exists in HiRDB (CWE-121). This issue impacts several versions, including HiRDB Server Version 10 (10-00 to before 10-12-01), Version 9 (09-00 through 09-66-22), and various Version 9(32) and Additional Function variants. The vulnerability is classified...

CVE-2026-82122 Stack-based Buffer Overflow Vulnerability in HiRDB

Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932: from 09-02 throug...

EUVD-2026-110662

Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 932: from 09-02 throug...

CVE-2026-92885

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...

Exploit for CVE-2026-115893

CVE-2026-115893: Wasmtime aarch64 Sandbox Escape A working fu...

Improper Encoding or Escaping of Output

Overview org.webjars.npm:qs is a querystring parser that supports nesting and arrays, with a depth limit. Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the stringify function when the allowEmptyArrays option is enabled. When an object key contains...

Improper Encoding or Escaping of Output

Overview qs is a querystring parser that supports nesting and arrays, with a depth limit. Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the stringify function when the allowEmptyArrays option is enabled. When an object key contains special...

CVE-2026-92885

The Qode Membership plugin for WordPress (versions up to and including 2.0.6.2 ) is vulnerable to an Authentication Bypass leading to Account Takeover . The root cause is a typographic error in the qode_membership_login_user_from_social_network function where the code checks an undefined variable...

CVE-2026-92885 Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...

CVE-2026-92885 Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...

EUVD-2026-110640

The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qodemembershipcheckfacebookuser AJAX action. This is due to a typographic error in the Facebook OAuth token verification guard within t...

CVE-2026-16521

An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted...

CVE-2026-16521

A command injection vulnerability exists in the Supermicro BMC syslog feature due to insufficient input filtering. An attacker can inject a command payload into a BMC function, which may execute when the associated service restarts. This flaw is associated with CWE-78 and has a CVSS 3.1 score of ...

EUVD-2026-110621

An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted...

CVE-2026-16521 Supermicro BMC's syslog feature contains a command injection vulnerability

An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted...

webkitgtk: use-after-free of JSCValue function parameters

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption...

Critical: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...