15227 matches found
Improper Certificate Validation
Bouncy Castle for Java is vulnerable to Improper Certificate Validation. The vulnerability is due to improper hostname verification behavior, which allows an attacker to exploit certificate validation by relying on the certificate’s Common Name CN when the hostname does not properly match the...
CVE-2026-82866
@pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePdf function that fetches arbitrary URLs without validation when basePdf is attacker-controlled. Attackers who control the basePdf template field can force servers or clients to make requests to...
CVE-2026-82866 @pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch
@pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePdf function that fetches arbitrary URLs without validation when basePdf is attacker-controlled. Attackers who control the basePdf template field can force servers or clients to make requests to...
CVE-2026-82866 @pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch
@pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePdf function that fetches arbitrary URLs without validation when basePdf is attacker-controlled. Attackers who control the basePdf template field can force servers or clients to make requests to...
EUVD-2026-68401
@pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePdf function that fetches arbitrary URLs without validation when basePdf is attacker-controlled. Attackers who control the basePdf template field can force servers or clients to make requests to...
CVE-2026-82866 @pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch
@pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePdf function that fetches arbitrary URLs without validation when basePdf is attacker-controlled. Attackers who control the basePdf template field can force servers or clients to make requests to...
CVE-2026-82866
@pdfme/common before 5.5.10 contains a server-side request forgery (SSRF) vulnerability in the getB64BasePdf function. When the basePdf template field is attacker-controlled, the function fetches arbitrary URLs without validation, allowing attackers to force servers or clients to request internal...
CVE-2026-82618: Out-of-bounds Read
A vulnerability was determined in Systerel S2OPC up to 1.7.3. The affected element is the function setrangematrixonstringarray of the file src/Common/opcuatypes/sopcbuiltintypes.c of the component String Array Range Writing. This manipulation causes out-of-bounds read. The attack is possible to b...
CVE-2026-82866: Server-Side Request Forgery (SSRF)
@pdfme/common before 5.5.10 contains a server-side request forgery vulnerability in the getB64BasePdf function that fetches arbitrary URLs without validation when basePdf is attacker-controlled. Attackers who control the basePdf template field can force servers or clients to make requests to...
ROOT-OS-DEBIAN-13-CVE-2026-43311 CVE-2026-43311 in linux - Patched by Root
Root has patched CVE-2026-43311 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-68307 CVE-2025-68307 in linux - Patched by Root
Root has patched CVE-2025-68307 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-68200 CVE-2025-68200 in linux - Patched by Root
Root has patched CVE-2025-68200 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-53167 CVE-2026-53167 in linux - Patched by Root
Root has patched CVE-2026-53167 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-23375 CVE-2026-23375 in linux - Patched by Root
Root has patched CVE-2026-23375 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-39812 CVE-2025-39812 in linux - Patched by Root
Root has patched CVE-2025-39812 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-31649 CVE-2026-31649 in linux - Patched by Root
Root has patched CVE-2026-31649 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-71204 CVE-2025-71204 in linux - Patched by Root
Root has patched CVE-2025-71204 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-40098 CVE-2025-40098 in linux - Patched by Root
Root has patched CVE-2025-40098 in the linux package for Root:Debian:13. Multiple fixed versions available...