CVE-2026-30269

Improper access control in Doorman v0.1.0 and v1.0.2 allows any authenticated user to update their own account role to a non-admin privileged role via /platform/user/username. The role field is accepted by the update model without a manageusers permission check for self-updates, enabling privileg...

CVE-2026-30616

Jaaz 1.0.30 contains a remote code execution vulnerability in its MCP STDIO command execution handling. A remote attacker can send crafted network requests to the network-accessible Jaaz application, causing attacker-controlled commands to be executed on the server. Successful exploitation result...

CVE-2026-49318

Incorrect behavior order in the Infotainment / Digital Round display of the Indian Motorcycle Scout Bobber + Tech 2025 model year allows an adjacent-network attacker to bypass the PIN entry screen. The Infotainment uses presence of Wireless Control Module WCM traffic during its boot window as a...

CVE-2026-5090

Template::Plugin::HTML versions through 3.102 for Perl allows HTML and JavaScript to be injected. The htmlfilter function did not escape single quotes. HTML attributes inside of single quotes could be have code injected. For example, the variable "var" in would not be properly escaped. An attacke...

GHSA-3PX4-28QC-4F47 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9938 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9940 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-4JM4-GH3X-CQ86 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9930 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-XF9G-PXHX-JG8C vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-RPM7-PHH8-26F7 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-2PM8-794W-P8M4 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-W739-54JW-WCMF vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9917 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-9GGG-9FQ9-QXVG vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-F56C-QCQF-CQ94 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9875 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-9899 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-P3HW-MV63-RF9W vulnerabilities

Vulnerabilities for packages: cargo-c, cargo-audit...

CVE-2026-9483

A vulnerability was found in SourceCodester Student Grades Management System 1.0. Affected is an unknown function of the file grades.php. Performing a manipulation of the argument studentid results in improper authorization. The attack may be initiated remotely. The exploit has been made public a...