24179 matches found
CVE-2026-45537
OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the constructuri function concatenates multiple URI components protocol, username, domain, port, params into a fixed 1024-byte global BSS buffer without any bounds checking. When a routi...
CVE-2026-70592
Ghost is a Node.js content management system. From 1.20.1 until 6.54.1, an Administrator-level user could remotely overwrite certain files on the filesystem through the database backup filename, leading to integrity and availability issues. The database export endpoint failed to reject path...
CVE-2026-18816
Summary : CVE-2026-18816 affects Baserow up to 2.3.2. The vulnerability resides in the 2FA Verify Endpoint, specifically the verify function in backend/src/baserow/api/two_factor_auth/views.py, enabling improper authentication. Impact : Could be exploited remotely; the exploit complexity is descr...
CVE-2026-45100 OpenSIPS: Buffer Overflow in Base64 Encode Transformation
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions 3.4.0-beta through 3.6.5 and 4.0.0-beta contain a buffer overflow in the s.b64encode string transformation. The size check for s.b64encode only verifies that the input fits within the 64 KB transformation buffer, but...
CVE-2026-65986
CVAT is an open source interactive video and image annotation tool for computer vision. Versions 2.5.0 through 2.66.0 contain a XSS vulnerability that can be accessed through annotation guide assets. When CVAT serves the files attached to an annotation guide, it labels them with a media type...
Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
Summary On standard channels, the message update and delete handlers accepted any caller holding write access on the channel, without checking that the caller wrote the message. Write access is the same grant a member needs in order to post, so every ordinary participant in a shared channel could...
CVE-2026-47781
PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins directory during initialization, allowing an attacker-controlled file in an untrusted repository checkout to execute arbitrary Python code befo...
EUVD-2026-52819
Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages. AWS has addressed this issue. No customer action is required...
CLSA-2026-1785727932 TuxCare security update for org.apache.logging.log4j (3 CVEs)
TuxCare rebuilt 33 org.apache.logging.log4j packages to address 3 CVEs. Fixed in 2.17.2-tuxcare.2...
CLSA-2026-1785381052 TuxCare security update for angular (4 CVEs)
TuxCare rebuilt angular to address 4 CVEs. Fixed in 1.5.10-tuxcare.3...
CLSA-2026-1784856365 TuxCare security update for 12 packages (1 CVE)
TuxCare rebuilt 12 packages to address 1 CVE. Fixed in 7.5.1-tuxcare.6...
CLSA-2026-1784856221 TuxCare security update for ws (1 CVE)
TuxCare rebuilt ws to address 1 CVE. Fixed in 3.3.3-tuxcare.2...
CLSA-2026-1784683091 TuxCare security update for immutable (1 CVE)
TuxCare rebuilt immutable to address 1 CVE. Fixed in 4.3.7-tuxcare.2...
CLSA-2026-1784769543 TuxCare security update for marked (4 CVEs)
TuxCare rebuilt marked to address 4 CVEs. Fixed in 0.3.19-tuxcare.1...
CLSA-2026-1784682764 TuxCare security update for npm-user-validate (2 CVEs)
TuxCare rebuilt npm-user-validate to address 2 CVEs. Fixed in 0.1.5-tuxcare.1...
CLSA-2026-1783904634 TuxCare security update for org.springframework.boot (6 CVEs)
TuxCare rebuilt 75 org.springframework.boot packages to address 6 CVEs. Fixed in 2.5.15-tuxcare.1...
CLSA-2026-1784077482 TuxCare security update for http-proxy-middleware (1 CVE)
TuxCare rebuilt http-proxy-middleware to address 1 CVE. Fixed in 2.0.7-tuxcare.1...
CLSA-2026-1782867594 TuxCare security update for zendframework/zendframework (1 CVE)
TuxCare rebuilt zendframework/zendframework to address 1 CVE. Fixed in 2.4.13-p1+tuxcare...