47527 matches found
CVE-2026-74949
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to use-after-free in the Graphics: Canvas2D component...
CVE-2026-74935
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Networking component...
NPM: MagicMirror: ssrf calendar .js
NPM: MagicMirror: ssrf calendar .js vulnerability discovered by ? in WordPress Npm magicmirror versions 2.37.0...
CVE-2026-67868
creationtimestamp| type| source ---|---|--- 2026-08-18 17:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mteovxyzso23...
CVE-2026-75926
creationtimestamp| type| source ---|---|--- 2026-08-18 16:39:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6jg2f2xrzxmht 2026-08-18 17:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mteoxl65zs2b 2026-08-18 18:09:59+00:00| seen|...
CVE-2026-72221
A flaw was found in the kernel. A race condition exists in the sunrpc component during the Transport Layer Security TLS handshake cancellation process. This can lead to the corruption of an internal data structure, potentially causing system instability or a denial of service. Additionally, it ma...
CVE-2026-67967
creationtimestamp| type| source ---|---|--- 2026-08-18 16:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtemofjdjx2c...
CVE-2026-19500
The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing th...
CVE-2026-59940
creationtimestamp| type| source ---|---|--- 2026-08-18 16:08:45+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtem26g27v2j...
EUVD-2026-60968
The Entries component in Brainstorm Force SureForms version, less than 2.1.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing the...
CVE-2026-19500 SureForms contains an uncontrolled resource consumption vulnerability
The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing th...
CVE-2026-19500
The Entries component in Brainstorm Force SureForms version, less than 2.1.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing the...
CVE-2026-19500
CVE-2026-19500 affects the Entries component of the Brainstorm Force SureForms WordPress plugin (versions below 2.12.3 ). The root cause is the absence of adequate limits on user-controlled form fields and submitted content during processing and rendering. A remote, unauthenticated attacker can s...
CVE-2026-75898
RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow "Invoke" component agent/component/invoke.py. The component builds an outbound request URL from canvas configuration and runtime template variables and passes it to requests.get, requests.post, or...
CVE-2026-75485
A flaw was found in the must-gather component of Red Hat Advanced Cluster Management for Kubernetes. The cluster Proxy object is dumped in raw form, bypassing the oc inspect redaction that would normally sanitize sensitive fields. This exposes proxy basic-auth credentials in the must-gather...
mysql: JSON unspecified vulnerability (CPU Jul 2026)
Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: JSON. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily...
mysql: DDL unspecified vulnerability (CPU Jul 2026)
Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: DDL. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to...
EUVD-2026-60824
RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow "Invoke" component agent/component/invoke.py. The component builds an outbound request URL from canvas configuration and runtime template variables and passes it to requests.get, requests.post, or...
CVE-2026-75898 RAGFlow < 0.26.3 - Server-Side Request Forgery via Agent Invoke Component
RAGFlow before 0.26.3 contains a server-side request forgery vulnerability in the agent workflow "Invoke" component agent/component/invoke.py. The component builds an outbound request URL from canvas configuration and runtime template variables and passes it to requests.get, requests.post, or...