CVE-2026-78140

Dromara UJCMS up to 10.1.3 is affected by a Server-Side Template Injection (SSTI) vulnerability in the update function of WebFileTemplateController.java (web-file-template endpoint). The root cause is improper neutralization of special elements used in the FreeMarker template engine. The attack i...

ROOT-OS-DEBIAN-11-CVE-2026-34001 CVE-2026-34001 in xorg-server - Patched by Root

Root has patched CVE-2026-34001 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-34002 CVE-2026-34002 in xorg-server - Patched by Root

Root has patched CVE-2026-34002 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-50256 CVE-2026-50256 in xorg-server - Patched by Root

Root has patched CVE-2026-50256 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-5574 CVE-2023-5574 in xorg-server - Patched by Root

Root has patched CVE-2023-5574 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-50257 CVE-2026-50257 in xorg-server - Patched by Root

Root has patched CVE-2026-50257 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-33999 CVE-2026-33999 in xorg-server - Patched by Root

Root has patched CVE-2026-33999 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-34000 CVE-2026-34000 in xorg-server - Patched by Root

Root has patched CVE-2026-34000 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-50260 CVE-2026-50260 in xorg-server - Patched by Root

Root has patched CVE-2026-50260 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-50259 CVE-2026-50259 in xorg-server - Patched by Root

Root has patched CVE-2026-50259 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-50264 CVE-2026-50264 in xorg-server - Patched by Root

Root has patched CVE-2026-50264 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-34003 CVE-2026-34003 in xorg-server - Patched by Root

Root has patched CVE-2026-34003 in the xorg-server package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-78061

CVE-2026-78061 affects vas3k TaxHacker up to version 0.8.2 . The vulnerability is a server-side request forgery (SSRF) in the Email Sync component, specifically in the function buildImapConfig within lib/email-sync/imap-client.ts. An attacker can manipulate the host/port arguments to force the se...

EUVD-2026-64626

A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Email Sync. Executing a manipulation of the argument host/port can lead to server-side request forgery. It is possible to launch the...

CVE-2026-78061 vas3k TaxHacker Email Sync imap-client.ts buildImapConfig server-side request forgery

A vulnerability was determined in vas3k TaxHacker up to 0.8.2. Impacted is the function buildImapConfig of the file lib/email-sync/imap-client.ts of the component Email Sync. Executing a manipulation of the argument host/port can lead to server-side request forgery. It is possible to launch the...

PT-2026-79788

Name of the Vulnerable Software and Affected Versions llama.cpp version bec4772f6 Description A deserialization flaw exists in the ggml-RPC Server component. A remote attacker can trigger this issue by manipulating the op or op params arguments within the deserialize tensor function located in th...

CVE-2026-73566 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, lerna, prism, kubeflow-centraldashboard, npm, sqlpad, node-gyp, saf, renovate, pulumi, code-server...

CVE-2026-75866

Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them. Punk::OAuth2::Server::Store registers scopes and granttypes per client and documents both as client registration. token dispatches...

CVE-2026-63311

NLTK before 3.10.0 affected versions = 3.9.4 contains a server-side request forgery SSRF vulnerability in the validatenetworkurl function in nltk/pathsec.py. The resolvehostname helper catches OSError and ValueError during socket.getaddrinfo and returns an empty list; when DNS resolution fails, t...

CVE-2026-75866 Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them

Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them. Punk::OAuth2::Server::Store registers scopes and granttypes per client and documents both as client registration. token dispatches...