1405744 matches found
Roxy Fileman 1.4.5 - Unrestricted File Upload
Roxy Fileman 1.4.5 is susceptible to unrestricted file upload via upload.php. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. id: CVE-2018-20526 info: name: Roxy Fileman 1.4.5 -...
MetInfo 7.0.0 beta - SQL Injection
MetInfo 7.0.0 beta is susceptible to SQL injection via the admin/?n=language&c=languagegeneral&a=doSearchParameter appno parameter a different issue than CVE-2019-16997. id: CVE-2019-17418 info: name: MetInfo 7.0.0 beta - SQL Injection author: ritikchaddha severity: high description: | MetInfo...
DCBI-Netlog-LAB v1.0 - Command Injection
An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request. id: CVE-2023-26802 info: name: DCBI-Netlog-LAB v1.0 - Command Injection author: pussycat0x...
GHSA-8R6M-32JQ-JX6Q vulnerabilities
Vulnerabilities for packages: tileserver-gl...
GHSA-4VJ7-5MJ6-JM8M vulnerabilities
Vulnerabilities for packages: tileserver-gl...
GHSA-M2W4-8GGF-RJ47 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-72GW-FMMR-C4R4 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-3PJW-73GF-8QR5 vulnerabilities
Vulnerabilities for packages: flyway...
chromedriver-150.0.7871.181-1.1 on GA media (moderate)
chromedriver-150.0.7871.181-1.1 on GA media Announcement ID: openSUSE-SU-2026:11346-1 Rating: moderate Cross-References: CVE-2026-16413 CVE-2026-16414 CVE-2026-16415 CVE-2026-16416 CVE-2026-16417 CVE-2026-16418 CVE-2026-16419 CVE-2026-16420 CVE-2026-16421 CVE-2026-16422 CVE-2026-16423...
ffmpeg-8-8.1.2-2.1 on GA media (moderate)
ffmpeg-8-8.1.2-2.1 on GA media Announcement ID: openSUSE-SU-2026:11347-1 Rating: moderate Cross-References: CVE-2026-12706 CVE-2026-8461 CVSS scores: CVE-2026-12706 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-8461 SUSE : 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affect...
GHSA-6VCH-Q96H-7GC3
creationtimestamp| type| source ---|---|--- 2026-07-24 23:31:23+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4 2026-07-25 00:00:18+00:00| seen| https://gist.github.com/alon710/c51377a7e449134a651b4b7f09b602f4...
CVE-2026-66337
A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...
CVE-2026-66337 Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()
A flaw was found in libsoup. An unsigned integer underflow in the soupfilterinputstreamreaduntil function causes a heap buffer over-read when parsing multipart HTTP responses. A malicious HTTP server can exploit this by sending a crafted multipart response, potentially causing the client...
CVE-2025-71408
creationtimestamp| type| source ---|---|--- 2026-07-24 23:00:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrghf4fvnp2q 2026-07-25 03:29:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrgwgrya5i23...
EUVD-2026-48299
AWS API MCP Server Security Policy Bypass via Startup Initialization Failure...
CVE-2025-71408 NLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments
NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...
CVE-2026-15308 vulnerabilities
Vulnerabilities for packages: python...
GHSA-7QJ2-Q5C8-CXX5 vulnerabilities
Vulnerabilities for packages: python...