CVE-2026-4317

CVE-2026-4317 describes an SQL injection in the Umami Software web application where an improperly sanitized timezone parameter is interpolated directly into SQL queries (potentially via prisma.rawQuery/prisma.$queryRawUnsafe or raw queries with ClickHouse). This authenticated-access vulnerabilit...

EUVD-2026-17273

The PaperCut NG/MF specifically, the embedded application for Konica Minolta devices is vulnerable to session hijacking. The PaperCut NG/MF Embedded application is a software interface that runs directly on the touch screen of a multi-function device. It was internally discovered that the...

CVE-2026-30290

CVE-2026-30290 concerns an arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1. The issue allows an attacker to overwrite critical internal files through the file import process, which can lead to arbitrary code execution or information exposure. The connected sourc...

CVE-2026-30290

An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

PT-2026-29298

Name of the Vulnerable Software and Affected Versions PDF Reader App : TA/UTAX Mobile Print version 3.7.2.251001 Description An arbitrary file overwrite issue exists during the file import process. This allows attackers to overwrite critical internal files, which can result in arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-2370

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.3 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 affecting Jira Conne...

App Craze Voice Recorder 安全漏洞

App Craze Voice Recorder is a mobile recording application developed by App Craze Company, which supports audio recording and management. Version 10.0 of App Craze Voice Recorder contains a security vulnerability. This vulnerability stems from an arbitrary file overwriting during the file import...

CVE-2026-30290

An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

CVE-2026-30277

The CVE-2026-30277 Core Details: An arbitrary file overwrite vulnerability affects TA/UTAX Mobile Print (PDF Reader App) v3.7.2.251001 via the file import process. The underlying issue allows an attacker to overwrite critical internal files, which can lead to arbitrary code execution or informati...

CVE-2026-30277

An arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

CVE-2026-30277

An arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

CVE-2026-30279

An arbitrary file overwrite vulnerability in Squareapps LLC My Location Travel Timeline v11.80 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure...

CVE-2026-35665

creationtimestamp| type| source ---|---|--- 2026-03-30 18:32:03+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-w6m8-cqvj-pg5v 2026-04-10 18:30:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj5xduwea22t...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition through the settings update pipeline in api/settings/settings.go and settings/settings.go. An attacker can corrupt app.ini and disrupt service availability by sending concurrent settings-update requests. Concurrent calls ...

CVE-2026-2370

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.3 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 affecting Jira Connect installations that could have allowed an authenticated user with minimal workspace permissions to obtain installation credentials and...

External Client App (ECA) for Veeam Data Cloud — Adapting to New Salesforce Security Requirements

Support Statement Summary of Changes to Salesforce Security Protocols Salesforce has introduced new security protocols for third-party applications accessing Salesforce organizations. This change affects all third-party products that integrate with Salesforce, requiring those vendors to transitio...

CVE-2026-2370 Improper Handling of Parameters in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.3 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 affecting Jira Connect installations that could have allowed an authenticated user with minimal workspace permissions to obtain installation credentials and...

Malicious code in dial-app-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efdd5b481d49a0d9ac535aedde75dbf5638bd85e7efe9c536d2938c57142799 The package dial-app-version was found to contain malicious code. Source: ossf-package-analysis...

MAL-2026-2285 Malicious code in dial-app-version (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9efdd5b481d49a0d9ac535aedde75dbf5638bd85e7efe9c536d2938c57142799 The package dial-app-version was found to contain malicious code. Source: ossf-package-analysis...

CVE-2026-4968

A vulnerability was determined in SourceCodester Diary App 1.0. The affected element is an unknown function of the file diary.php. Executing a manipulation can lead to cross-site request forgery. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized...