@ir-engine/server-core (1.6.0), @ir-engine/taskserver (1.6.0) +4 more potentially affected by CVE-2026-27193 via @feathersjs/authentication-oauth (>=5.0.0-pre.10, <=5.0.12)

@feathersjs/authentication-oauth NPM version =5.0.0-pre.10, =2.0.4, =0.5.0, =0.5.4, =0.0.1, =2.0.4 Source cves: CVE-2026-27193 Source advisory: SNYK:JS-FEATHERSJSAUTHENTICATIONOAUTH-15325870...

bke-fliesenverlegung.de Improper Access Control vulnerability OBB-3817546

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bke-fliesenverlegung.de Improper Access Control vulnerability OBB-3778076

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the BKE_mesh_calc_normals_tessface component in the software suite for creating 3D computer graphics in Blender allows a hacker to execute arbitrary code.

The vulnerability of the BKEmeshcalcnormalstessface component in the software suite for creating 3D computer graphics in Blender is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created blend file...

UBUNTU-CVE-2017-12086

An exploitable integer overflow exists in the 'BKEmeshcalcnormalstessface' functionality of the Blender open-source 3d creation suite. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

Unfixed XSS vulnerability at lm.reddion.com

Security researcher BKe, has submitted on 25/12/2008 a cross-site-scripting XSS vulnerability affecting lm.reddion.com, which at the time of submission ranked 205473 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2009. It is currently...