1233 matches found
EUVD-2026-47687
In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt failures from invalid-JSON parse failures, creating an oracle that reveals protected metadata values to remote attackers...
EUVD-2026-47320
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: JSON. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged...
PT-2026-70162
Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.67 n8n versions prior to 2.31.5 n8n versions prior to 2.32.1 Description A prototype pollution issue exists in the Edit Fields Set node. This occurs because the node assigns output fields using a dot-notation path...
EUVD-2026-43738
pyasn1: Uncontrolled resource consumption when converting decoded REAL values...
EUVD-2026-45956
Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administrator with adequate entitlements can import arbitrary BPMN process definitions via the REST API and then start the process. When a BPMN process containing a Groovy scriptTask is imported and started, the Groovy...
jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing
A flaw was found in jackson-databind, a general-purpose data-binding library for Jackson Data Processor. A remote attacker can exploit this vulnerability by sending deeply nested JSON JavaScript Object Notation data to a service that reads and processes it. This can lead to a Denial of Service Do...
CVE-2026-30623
LiteLLM version 1.18.10 is vulnerable to remote code execution (RCE) via its MCP server creation functionality. The root cause is a lack of validation for arbitrary command and args values provided in a JSON configuration, which allows attackers to execute unauthorized operating system commands w...
CVE-2026-30623
LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values. LiteLLM executes these values on the host without validation, enabling...
CVE-2026-8384
In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the expected: /admin/secret.txt Jetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker only...
PT-2026-58107
Name of the Vulnerable Software and Affected Versions pyasn1 versions prior to 0.6.4 Description The univ.Real type converts its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value containing a very large exponent can...
ROS-20260714-73-0003
The vulnerability of the ASN.1 PER protocol analyzer and the Wireshark network traffic analyzer is related to uncontrolled recursion. Exploiting this vulnerability can allow attackers to cause service failures...
CVE-2026-15680 Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability
Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. Authentication is not required to exploit th...
CVE-2026-61505 Rejetto HFS < 3.2.1 Limited File Disclosure via Path Traversal in lang Parameter
Rejetto HFS 3.0.0 through 3.2.0 allows path traversal through the lang query parameter, permitting a remote unauthenticated attacker to read certain JSON files outside the shared folders. Exploitation is constrained to files matching a narrow naming and format pattern, limiting practical impact...
Linux Distros Unpatched Vulnerability : CVE-2026-49844
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issu...
GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities
Vulnerabilities for packages: docker-fips, teleport, trivy-operator, neuvector-sigstore-interface, tkn-fips, kyverno, kyverno-notation-aws-fips, trivy-operator-fips, kubescape-server-fips, crossplane-fips, commercial-kyverno, neuvector-sigstore-interface-fips, gitsign, cloudbeat-fips, cloudbeat,...
CVE-2026-54771
Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.3, a Langroid application exposing a chat interface to untrusted users may allow direct tool invocation via raw JSON payloads, even when tools are registered with use=False, handle=True. Version...
GHSA-FF52-PH69-CF7X vulnerabilities
Vulnerabilities for packages: promxy, cert-manager-cmctl, kube-vip, cilium-cli, witness, http-echo, lazydocker, docker-compose, terraform-provider-acme, envoy-ratelimit, tigera-operator, guac, melange, kubernetes-csi-driver-nfs, tailscale, coredns, newrelic-nri-statsd, step-ca, nri-mongodb,...
PYSEC-2026-2828 Out-of-bounds Write in OpenCV
An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, version 4.1.0 corresponds with OpenCV-Python version 4.1.2.30. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code...
pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values
A remote attacker can exploit this by providing specially crafted BER/CER/DER-encoded ASN.1 data with a large exponent in the REAL value. When the application subsequently prints, logs, compares, or performs arithmetic on the decoded value, this can cause excessive CPU and memory consumption,...
