312122 matches found
CVE-2026-65832
In Deskflow before continuous build 1.26.0.299, a remote unauthenticated server sends crafted kMsgDSetOptions values that poison m_modifierTranslationTable, causing out-of-bounds reads in translateKey()/translateModifierMask() (disclosing 4 bytes or crashing the client). Fixed in build 1.26.0.299...
CVE-2026-75479
JimuReport's report folder template listing endpoint lacks authentication, letting unauthenticated attackers enumerate all reports, harvest share tokens, then access protected endpoints to retrieve full report definitions including embedded SQL and live query data. CVSS 3.1 scores this HIGH (7.5)...
CVE-2026-75108
Next Terminal is vulnerable due to missing per-asset authorization checks on its portal ping and wake-on-LAN endpoints . Any authenticated user (PR:L) can supply arbitrary asset IDs to retrieve unauthorized asset metadata (display names, reachability, network addresses) or trigger wake-on-LAN pac...
CVE-2026-75105 phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter
phpIPAM through 1.8.1 fails to verify that a requested IP address belongs to the subnet a temporary share token was issued for. In app/tempshare/index.php and app/tempshare/address.php, when the share type is 'subnets', the subnetId parameter is used directly as a database primary key to fetch an...
CVE-2026-75105 phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter
phpIPAM through 1.8.1 fails to verify that a requested IP address belongs to the subnet a temporary share token was issued for. In app/tempshare/index.php and app/tempshare/address.php, when the share type is 'subnets', the subnetId parameter is used directly as a database primary key to fetch an...
CVE-2026-75105
phpIPAM ≤1.8.1 lacks subnet-scope checks in app/temp_share/index.php and address.php; an unauthenticated holder of any temporary share URL can enumerate the subnetId parameter to read IP records—including hostnames, DNS, MAC addresses, and notes—across all sections and subnets. Patch released in ...
EUVD-2026-60385
phpIPAM through 1.8.1 fails to verify that a requested IP address belongs to the subnet a temporary share token was issued for. In app/tempshare/index.php and app/tempshare/address.php, when the share type is 'subnets', the subnetId parameter is used directly as a database primary key to fetch an...
GHSA-QQQ4-5773-PMW5
creationtimestamp| type| source ---|---|--- 2026-08-17 20:32:43+00:00| seen| https://gist.github.com/alon710/714a45d6d9776f210b84a676518696fb...
GHSA-GGR6-FMR8-2M8G vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-X88Q-X2R7-VG3G vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-HWQ5-42J9-JVQJ vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-28753 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-6364-X4QJ-7W59 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
CVE-2026-27784 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
GHSA-5MCP-3252-F5VR vulnerabilities
Vulnerabilities for packages: nginx-mainline...
CVE-2026-28755 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
GHSA-82W2-X7HF-5H8R vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...
GHSA-GGR6-FMR8-2M8G vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...