77290 matches found
OpenEMR Fax/SMS Module Path Traversal Detection Scanner
This repository contains a detection-only security scanner for CVE-2026-24849 affecting the OpenEMR Fax/SMS module. It identifies potentially vulnerable OpenEMR installations by checking the application version, verifying the Fax/SMS module is present, probing the affected endpoint, and optionall...
Juniper Junos OS Vulnerability (JSA110076)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA110076 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon RPD of Juniper Networks Junos OS and Junos OS Evolved allows an...
PT-2026-56356
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description During the PRC parsing stage, a lack of boundary verification for the PRC entity index allows an out-of-bounds read of the entity array, causing the application to crash...
PT-2026-56559
Name of the Vulnerable Software and Affected Versions NATS Server versions prior to 2.14.3 NATS Server versions prior to 2.12.12 Description MQTT retained message delivery and QoS1+ durable replay may deliver messages to subscribers even if the original topics match a configured subscribe deny...
CVE-2026-15033: Improper Neutralization of Special Elements used in an OS Command
A flaw has been found in christopherthielen check-peer-dependencies up to 4.3.4. Affected by this vulnerability is the function shelljs.exec of the file dist/packageUtils.js of the component peerDependencies. This manipulation causes os command injection. The attack may be initiated remotely. The...
Amazon Linux 2 : samba, --advisory ALAS2-2026-3493 (ALAS-2026-3493)
The version of samba installed on the remote host is prior to 4.10.16-24. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3493 advisory. unauthenticated udp packet crashes AD DC nbt server CVE-2026-3238 Samba file servers and classic non-AD domain controller...
NTFS File System Heap Buffer Overflow DoS
The vulnerability of the ntfsinitfromboot function in the fs/ntfs3/super.c file of the NTFS file system in the Linux operating system is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2026-55079 Coder's unbounded memory allocation in provisioner file upload allows authenticated denial of service
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.24.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, NewDataBuilder in provisionersdk/proto/dataupload.go allocated a byte slice using the client-supplied FileSize from a...
CVE-2026-55078 Coder: Zip upload decompression lacks aggregate size limit, enabling denial of service
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, POST /api/v2/files converts zip uploads to tar in memory via CreateTarFromZip, which enforced a per-entry size limit but no...
CVE-2026-59704 Cap - Missing Access Control in Video AI Metadata Endpoint
Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated attackers can supply arbitrary video IDs to read sensitive AI-generated content and trigger unauthorized AI generatio...
CVE-2026-59704
Cap’s GET /api/video/ai endpoint lacks proper ownership/membership validation, exposing private video AI metadata (titles, summaries, chapters) and enabling authenticated attackers to solicit arbitrary video IDs to read sensitive content. This may also trigger unauthorized AI generation that depl...
CVE-2026-46700
Actual is a local-first personal finance tool. Prior to 26.6.0, the GET /secret/:name endpoint in @actual-app/sync-server checks only that the caller has a valid session and does not verify the caller is an admin, while the sibling POST /secret/ handler enforces an admin check in OpenID mode. Any...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview @better-auth/oauth-provider is an An oauth provider plugin for Better Auth Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition through a race condition in the authorizationcode grant handler. An attacker can obtain multiple valid access,...
Time-of-check Time-of-use (TOCTOU) Race Condition
Overview better-auth is a The most comprehensive authentication library for TypeScript. Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition through a race condition in the authorizationcode grant handler. An attacker can obtain multiple valid access...
json-flattener:AdvancedFuzzer: Security exception in com.google.gson.internal.bind.TypeAdapters$28.write
Project: https://github.com/wnameless/json-flattener.git Detailed Report: https://oss-fuzz.com/testcase?key=5258667411439616 Project: json-flattener Fuzzing Engine: libFuzzer Fuzz Target: AdvancedFuzzer Job Type: libfuzzerasanjson-flattener Platform Id: linux Crash Type: Security exception Crash...
CVE-2026-53730
DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, the /de2api/datasetData/previewSql endpoint lacks the mandatory @DePermit permission validation annotation, allowing any authenticated user to specify datasourceId=-1, access the built-in engine database, execute...
CVE-2026-48955
An improper access check allows unauthorized users to access workflow stage and transition information...
CVE-2026-48957
An improper access check allows unauthorized users to access comprivacy datasets...