3638 matches found
Chromium: CVE-2026-17819 Inappropriate implementation in WebAppInstalls
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
MINI-MX8P-823Q-8RMG
Bulletin has no description...
📄 Trilium Notes 0.102.1 Remote Code Execution
A proof of concept exploit for Trilium Notes TriliumNext versions 0.102.1 and earlier that contain a remote code execution vulnerability. The exploit imports a crafted Trilium export archive that bypasses the application's safe import protections through a path traversal and stored cross site...
SUSE CVE-2026-40262
Note Mark is an open-source note-taking application. In versions 0.19.1 and prior, the asset delivery handler serves uploaded files inline and relies on magic-byte detection for content type, which does not identify text-based formats such as HTML, SVG, or XHTML. These files are served with an...
SUSE CVE-2026-40263
Note Mark is an open-source note-taking application. In versions 0.19.1 and prior, the login endpoint performs bcrypt password verification only when the supplied username exists, returning immediately for nonexistent usernames. This timing discrepancy allows unauthenticated attackers to enumerat...
SUSE CVE-2026-40265
Note Mark is an open-source note-taking application. In versions 0.19.1 and prior, the asset download endpoint at /api/notes/noteID/assets/assetID is registered without authentication middleware, and the backend query does not verify ownership or book visibility. An unauthenticated user who knows...
SUSE CVE-2026-41572
Note Mark is an open-source note-taking application. Prior to version 0.19.3, after a note-mark owner soft-deletes a public book, its notes and uploaded assets stay readable at /api/notes/id, /api/notes/id/content, the slug URL, and the asset endpoints. Unauthenticated callers who hold the note I...
SUSE CVE-2026-44522
Note Mark is an open-source note-taking application. From 0.13.0 to before 0.19.4, the Note Mark application allows authenticated users to upload assets to notes via POST /api/notes/noteID/assets, where the asset filename is provided through the X-Name HTTP request header. This value is stored...
SUSE CVE-2026-44523
Note Mark is an open-source note-taking application. Prior to 0.19.4, no minimum length or entropy is enforced on the JWTSECRET configuration value. The application accepts any base64-decodable secret regardless of size, including secrets as short as 1 byte. This vulnerability is fixed in 0.19.4...
CVE-2026-5219
Cross-Site request forgery CSRF vulnerability in Softtr Information Technology Trade Ltd. Co. E-Commerce Pack allows Cross Site Request Forgery. This issue affects E-Commerce Pack: before 5.03.01.49...
MINI-PCRP-FMQ4-WCC4
Bulletin has no description...
CVE-2025-71387
creationtimestamp| type| source ---|---|--- 2026-07-30 04:45:03+00:00| seen| https://jvn.jp/en/vu/JVNVU98815601 2026-08-30 13:33:24+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mucixhfot22o...
DEBIAN-CVE-2026-17775
Inappropriate implementation in PresentationAPI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
PHP 8.2.x < 8.2.33 Multiple Vulnerabilities SQLI
The version of PHP installed on the remote host is prior to 8.2.33. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.2.33 advisory. - Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8....
MINI-X5JH-M69C-86WC
Bulletin has no description...
MINI-CW43-M94F-QPCC
Bulletin has no description...
MINI-X9XR-398W-CJP9
Bulletin has no description...
MINI-JM2Q-RXWJ-MJPX
Bulletin has no description...