EUVD-2026-17349

SQL inyection SQLi vulnerability in Umami Software web application through an improperly sanitized parameter, which could allow an authenticated attacker to execute arbitrary SQL commands in the database.Specifically, they could manipulate the value of the 'timezone' request parameter by includin...

CVE-2024-14030

Sereal::Decoder versions from 4.000 through 4.009002 for Perl embeds a vulnerable version of the Zstandard library. Sereal::Decoder embeds a version of the Zstandard zstd library that is vulnerable to CVE-2019-11922. This is a race condition in the one-pass compression functions of Zstandard prio...

CVE-2026-5197

A vulnerability was found in code-projects Student Membership System 1.0. The affected element is an unknown function of the file /deleteuser.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

EUVD-2026-17351

A vulnerability has been found in code-projects Student Membership System 1.0. Impacted is an unknown function of the file /deletemember.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be...

CVE-2026-5195

The CVE-2026-5195 entry concerns code-projects Student Membership System 1.0, specifically the User Registration Handler. The issue is a SQL injection vulnerability exploitable via remote input manipulation. The provided metrics indicate CVSS v3.0/3.1/4.0 scores with high impact on confidentialit...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: cerbos, kyverno-fips, rancher-fleet-fips, zot, kaniko-fips, guac, crossplane-fips, k9s-fips, scorecard, packer-fips, packer, zarf-fips, argo-events-fips, grype, gitea-fips, steampipe, cloudbeat, trivy-operator-fips, pulumi-language-dotnet, kubevela-fips, trufflehog,...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: cerbos, kyverno-fips, rancher-fleet-fips, zot, kaniko-fips, guac, crossplane-fips, k9s-fips, scorecard, packer-fips, packer, zarf-fips, argo-events-fips, grype, gitea-fips, steampipe, cloudbeat, trivy-operator-fips, pulumi-language-dotnet, kubevela-fips, trufflehog,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: cerbos, kyverno-fips, rancher-fleet-fips, zot, kaniko-fips, guac, crossplane-fips, k9s-fips, scorecard, packer-fips, packer, zarf-fips, argo-events-fips, grype, gitea-fips, steampipe, cloudbeat, trivy-operator-fips, pulumi-language-dotnet, kubevela-fips, trufflehog,...

CVE-2026-32714

A SQL injection vulnerability was found in the KeyCache component of scitokens. The implementation constructs SQL queries using Python string formatting with user-controlled input such as issuer and key identifiers. An attacker could exploit this flaw by supplying crafted input that alters the...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: cerbos, argo-cd, kubescape, rancher-fleet, steampipe, osv-scanner, pulumi-language-java, zarf, gitsign, flux, wolfictl, kyverno, nuclei, dagger, kaniko, nfpm, grafana-alloy, trufflehog, argo-events, crossplane, gitaly, tfsec, bom, flux-image-automation-controller,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: cerbos, argo-cd, kubescape, rancher-fleet, steampipe, osv-scanner, pulumi-language-java, zarf, gitsign, flux, wolfictl, kyverno, nuclei, dagger, kaniko, nfpm, grafana-alloy, trufflehog, argo-events, crossplane, gitaly, tfsec, bom, flux-image-automation-controller,...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: cerbos, argo-cd, kubescape, rancher-fleet, steampipe, osv-scanner, pulumi-language-java, zarf, gitsign, flux, wolfictl, kyverno, nuclei, dagger, kaniko, nfpm, grafana-alloy, trufflehog, argo-events, crossplane, gitaly, tfsec, bom, flux-image-automation-controller,...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: cerbos, argo-cd, kubescape, rancher-fleet, steampipe, osv-scanner, pulumi-language-java, zarf, gitsign, flux, wolfictl, kyverno, nuclei, dagger, kaniko, nfpm, grafana-alloy, trufflehog, argo-events, crossplane, gitaly, tfsec, bom, flux-image-automation-controller,...

DEBIAN-CVE-2026-34060

Ruby LSP is an implementation of the language server protocol for Ruby. Prior to Shopify.ruby-lsp version 0.10.2 and ruby-lsp version 0.26.9, the rubyLsp.branch VS Code workspace setting was interpolated without sanitization into a generated Gemfile, allowing arbitrary Ruby code execution when a...

CVE-2026-34060

Ruby LSP is an implementation of the language server protocol for Ruby. Prior to Shopify.ruby-lsp version 0.10.2 and ruby-lsp version 0.26.9, the rubyLsp.branch VS Code workspace setting was interpolated without sanitization into a generated Gemfile, allowing arbitrary Ruby code execution when a...

SQL Injection

Overview scitokens is a SciToken reference implementation library Affected versions of this package are vulnerable to SQL Injection via the KeyCache class. An attacker can execute arbitrary SQL commands against the local SQLite database by supplying crafted input to parameters such as issuer and...

CVE-2026-34060 Ruby LSP has arbitrary code execution through branch setting

Ruby LSP is an implementation of the language server protocol for Ruby. Prior to Shopify.ruby-lsp version 0.10.2 and ruby-lsp version 0.26.9, the rubyLsp.branch VS Code workspace setting was interpolated without sanitization into a generated Gemfile, allowing arbitrary Ruby code execution when a...

CVE-2026-32714 SciTokens vulnerable to SQL Injection in KeyCache

SciTokens is a reference library for generating and using SciTokens. Prior to version 1.9.6, the KeyCache class in scitokens was vulnerable to SQL Injection because it used Python's str.format to construct SQL queries with user-supplied data such as issuer and keyid. This allowed an attacker to...

CVE-2026-27697 baserCMS: SQL injection vulnerability in blog post

baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3...

[SECURITY] Fedora 44 Update: rust-1.94.1-1.fc44

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator...