39696 matches found
Missing Authorization
Overview parse-server is a version of the Parse backend that can be deployed to any infrastructure that can run Node.js. Affected versions of this package are vulnerable to Missing Authorization via the generic /classes/GraphQLConfig and /classes/Audience REST API routes, which do not enforce...
EUVD-2026-10865
Parse Server has a bypass of class-level permissions in LiveQuery...
PT-2026-24843
Name of the Vulnerable Software and Affected Versions xierongwkhd weimai-wetapp versions prior to 5fe9e8225be4f73f2c5087f134aff657bdf1c6f2 Description A security issue exists in xierongwkhd weimai-wetapp. The getAdmins function within the file source-code/src/main/java/com/moke/wp/wx...
PT-2026-24839
OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.0.0.1, stored cross-site scripting XSS in the Graphical Pain Map "clickmap" form allows any authenticated clinician to inject arbitrary JavaScript that executes in the browser of...
PT-2026-24849
Name of the Vulnerable Software and Affected Versions xierongwkhd weimai-wetapp versions up to 5fe9e8225be4f73f2c5087f134aff657bdf1c6f2 Description A flaw exists in xierongwkhd weimai-wetapp. The issue affects the getLikeMovieList function within the file source-code/src/main/java/com/moke/wp/wx...
Fedora: Security Advisory (FEDORA-2026-7b9874a01f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Elevation of Privilege Vulnerability in Multiple Mozilla Products (CNVD-2026-13447)
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. An elevation of privilege vulnerability exists in several Mozilla produc...
Crafter CMS 安全漏洞
Crafter CMS is an open-source content management system CMS designed for digital experience applications. Versions of Crafter CMS prior to 5.9.7 and 4.17.3 contained security vulnerabilities. These vulnerabilities stemmed from the striptags function, which failed to filter URL schemes, potentiall...
PT-2026-24859
A vulnerability was found in 0xKoda WireMCP up to 7f45f8b2b4adeb76be8c6227eefb38533fdd6b1e. Impacted is the function server.tool of the file index.js of the component Tshark CLI Command Handler. The manipulation results in os command injection. The attack needs to be approached locally. The explo...
Code execution vulnerability in multiple Mozilla products (CNVD-2026-13445)
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code execution vulnerability exists in multiple Mozilla products due t...
Linux kernel export_dmabuf buffer overflow DoS
The vulnerability of the exportdmabuf function in the drivers/accel/habanalabs/common/memory.c kernel module of the Linux operating system is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
ntfs3 fs function Heap Buffer Overflow DoS
The vulnerability of the ntfsrename function in the fs/ntfs3/namei.c file of the NTFS file system in Linux operating systems is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
Atheros Wireless Driver Heap Buffer Overflow DoS
The vulnerability of the ath12kdptx function in the drivers/net/wireless/ath/ath12k/dptx.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an...
drm/tegra Component DoS
The vulnerability of the drm/tegra component in the Linux operating system is related to the failure to release resources after the expiration of their useful life. Exploiting this vulnerability allows a perpetrator to cause service failures...
CVE-2026-23180 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23180 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2026-23031 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23031 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2025-71162 affecting package kernel for versions less than 6.6.126.1-1
CVE-2025-71162 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...
CVE-2026-23025 affecting package kernel for versions less than 6.6.126.1-1
CVE-2026-23025 affecting package kernel for versions less than 6.6.126.1-1. A patched version of the package is available...