CVE-2026-108942: Improper Neutralization of Input During Web Page Generation

A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function createhtmlforitem of the file modules/uiextranetworks.py of the component Extra Networks Card Rendering. The manipulation of the argument Description result...

CVE-2026-108939: Server-Side Request Forgery (SSRF)

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been...

CVE-2026-108959: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-103499: Uncontrolled Resource Consumption

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : curl vulnerability (USN-8651-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8651-1 advisory. It was discovered that curl incorrectly handled reusing connections when the origin change...

Cisco Secure Workload protection Multi-cloud Data Centers Compromise Data Compromise

The vulnerability of the Cisco Secure Workload protection mechanism for multi-cloud data centers previously known as Tetration is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected...

Application Development Environment Angular XSS

The vulnerability of the application development environment and the Angular single-page application platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

ReactPHP react/http DoS

The vulnerability of the handleData function in the ReactPHP library’s react/http package, which handles streaming HTTP messages, is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Routing and Remote Access Service RCE

The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome Downloads Unauthorized Access

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Microsoft Edge Memory Use After Free

The vulnerability of Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

DirectWrite Code Execution

The vulnerability of the DirectWrite programming interface in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Fabric OS AAA Privilege Bypass

The vulnerability of the Fabric OS AAA component of the Brocade Fabric OS operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Nginx UI Code Execution

The vulnerability of the Nginx UI server’s user interface is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

JFrog Artifactory Privilege Escalation

The vulnerability of the JFrog Artifactory repository management platform is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

Elixirgrpc Algorithmic Complexity DoS

The vulnerability of the Elixirgrpc programming language’s web application development library is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

DirectWrite Code Execution

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Graphic Fonts Windows Code Execution

The vulnerability of the Graphic Fonts component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...