87591 matches found
CVE-2026-55179 Joplin: Logic error in Joplin Server allows a signed-in user to read any note from its internal server ID
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /items/:id/content route in packages/server/src/routes/index/items.ts loads item content from an attacker-supplied internal server ID without checking...
CVE-2026-55179 Joplin: Logic error in Joplin Server allows a signed-in user to read any note from its internal server ID
Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /items/:id/content route in packages/server/src/routes/index/items.ts loads item content from an attacker-supplied internal server ID without checking...
CVE-2026-55179
Joplin Server (the self-hosted component of the open-source note-taking app Joplin) contains an authorization flaw in its GET /items/:id/content route (defined in packages/server/src/routes/index/items.ts). Prior to version 3.7.2 , the route loads item content using an attacker-supplied internal ...
SUSE CVE-2026-27780
Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing pre-receive hook input, allowing oversized input to bypass branch-protection checks...
curl: libcurl: Unauthorized connection reuse due to a logical error
A flaw was found in libcurl. A logical error in the connection pooling mechanism may cause libcurl to reuse an authenticated connection for an unintended service. This could allow an application to wrongfully reuse an existing connection to the same server that was authenticated for a different...
K000163345: GnuTLS vulnerability CVE-2026-3832
Security Advisory Description A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted Online Certificate Status Protocol OCSP response during a TLS handshake. Due to a logic error in how gnutls processes multi-record OCSP responses, a clien...
Apache ActiveMQ Client: Apache ActiveMQ: Apache ActiveMQ All: Apache ActiveMQ: Denial of Service via crafted WireFormatInfo frame
A flaw was found in Apache ActiveMQ. An unauthenticated network attacker can exploit this vulnerability by sending a specially crafted WireFormatInfo frame with an excessively large size value. This unvalidated value causes the broker to attempt an oversized memory allocation during...
ROS-20260921-73-0051
The vulnerability in Xen is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260921-73-0135
The vulnerability in curl is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-88467
The CRMEB Knowledge-Paid System (specifically crmeb_zzff_class version 1.4.4 ) contains a vulnerability in a backend verification function. The function returns an incorrect value type, which triggers errors and results in the leakage of sensitive information . No specific remediation steps, expl...
PT-2026-96165
Name of the Vulnerable Software and Affected Versions Dasel versions 3.0.0 through 3.11.0 Description Dasel is a command-line tool and library for querying, modifying, and transforming data structures. The software fails to implement a depth guard when recursing per input nesting level within the...
The vulnerability of the command-line interface of the vm2 package manager NPM allows a hacker to execute arbitrary code.
The vulnerability of the command-line interface of the NPM package manager’s vm2 library is related to initialization errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
EulerOS Virtualization 2.10.0 : perl-DBI (EulerOS-SA-2026-3880)
According to the versions of the perl-DBI packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders.The preparse meth...
ALSA-2026:69126 Important: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: libcurl: Unauthorized connection reuse due to a logical error CVE-2026-8458 curl: Information disclosure due to...
EUVD-2026-84187
Improper error handling in the GRAPH.EFFECT component /effects/effectsapply.c of FalkorDB Redis module v4.20.1 leads to a Denial of Service DoS within the application...
CVE-2026-88411
Improper error handling in the GRAPH.EFFECT component /effects/effectsapply.c of FalkorDB Redis module v4.20.1 leads to a Denial of Service DoS within the application...
CVE-2026-88411
CVE-2026-88411 is an improper error handling vulnerability in the GRAPH.EFFECT component (/effects/effects_apply.c) of FalkorDB (a Redis module) v4.20.1 , leading to a Denial of Service within the application. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector requiring no privileges...
PT-2026-96295
Improper error handling in the GRAPH.EFFECT component /effects/effects apply.c of FalkorDB Redis module v4.20.1 leads to a Denial of Service DoS within the application...