306510 matches found
@bloggrify/bento (3.1.0), @bloggrify/core (>=3.2.0, <=3.3.0) +13 more potentially affected by unknown CVE via @nuxt/nitro-server (>=4.4.7, <=4.5.0)
@nuxt/nitro-server NPM version =4.4.7, =3.2.0, =4.5.0-depup.0, =1.13.12, =1.6.0-rc.3, =1.0.0-alpha.17, =1.0.0, =4.4.7, =0.6.0-rc.4, =0.2.3, =1.0.0-alpha.12, =1.0.0-alpha.20 Source cves: unknown CVE Source advisory: SNYK:JS-NUXTNITROSERVER-18857957...
CVE-2026-34502
A flaw was found in the memcached client in the Apache Portable Runtime Utility apr-util. A remote, unauthenticated attacker can cause the application to crash or become unresponsive by sending a specially crafted response from a malicious or compromised memcached server, resulting in a denial of...
CVE-2026-73070 Vim: Stack Buffer Overflow in the Vim Socket Server
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...
CVE-2026-73070 Vim: Stack Buffer Overflow in the Vim Socket Server
Vim is an open source, command line text editor. Prior to 9.2.0842, the socket server backend in src/socketserver.c accepts unbounded client connections in socketserveraccept, causing descriptors to overflow fdset structures in src/channel.c and fixed-size struct pollfd arrays in src/osunix.c,...
CVE-2026-72921
SeaweedFS is a distributed storage system. Prior to 4.24, the weed/server/filerserverhandlers.go allowedprefixes authorization check used strings.HasPrefix on raw path strings, so a filer JWT scoped to /tenant1 also authorized sibling paths such as /tenant1234, /tenant1-old, and /tenant1backup,...
CVE-2026-18638 Velociraptor server crash via the SetPassword API
Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server process with a single request, by calling SetPassword with a username that does not exist...
EUVD-2026-56185
Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server process with a single request, by calling SetPassword with a username that does not exist...
CVE-2026-18638 Velociraptor server crash via the SetPassword API
Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server process with a single request, by calling SetPassword with a username that does not exist...
Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Commons Compress
Summary Multiple vulnerabilities in Apache Commons Compress that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2023-42503 DESCRIPTION: Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.Th...
CVE-2026-72921
SeaweedFS CVE-2026-72921 affects the filer server component where the authorization check used strings.HasPrefix on raw path strings, allowing a JWT scoped to /tenant1 to access sibling paths like /tenant1234, /tenant1-old, and /tenant1backup. Root cause: prefix-based path matching without proper...
CVE-2026-51583
An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...
GHSA-XH95-F55M-82FW vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-12074 vulnerabilities
Vulnerabilities for packages: open-webui...
August 11, 2026-KB5120698 Cumulative Update for .NET Framework 3.5 and 4.7.2 for Windows 10, version 1809 and Windows Server 2019
None None...
Description of the security update for Microsoft Exchange Server 2019 CU14: August 11, 2026 (KB5121575)
None None...
August 11, 2026-KB5120714 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Windows Server 2022
None None...
August 11, 2026-Security and Quality Rollup for .NET Framework 4.6.2, 4.7, 4.7.1, 4.7.2 for Windows Server 2012 (KB5120699)
None None...
September 8, 2026-Security and Quality Rollup for .NET Framework 3.5 for Windows Server 2012 R2 (KB5120695)
None None...
