22016 matches found
PT-2026-22755
An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code in the build environment. This vulnerability was patched on 26 January 2026, and no customer action is needed...
MiracleLinux 9 : skopeo-1.20.0-3.el9_7 (AXSA:2026-230:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-230:01 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 golang: net/url: Memory exhaustio...
PT-2026-22797
IBM Storage Scale IBM S through rage Scale 5.2.3.0 - 5.2.3.5, and IBM S through rage Scale 6.0.0.0 - 6.0.0.1 could allow a local user to unintentionally trigger additional permissions for resources in a way that allows that resource to be executed by unintended actors...
EUVD-2026-9268
The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the storedata and getchatgptapikey functions in all versions up to, and including, 2.7.5. This makes it possible for...
CVE-2026-1336 AI ChatBot with ChatGPT and Content Generator by AYS <= 2.7.5 - Missing Authorization to Unauthenticated API Key Modification
The AI ChatBot with ChatGPT and Content Generator by AYS plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the storedata and getchatgptapikey functions in all versions up to, and including, 2.7.5. This makes it possible for...
Inefficient Algorithmic Complexity
Overview pypdf is an A pure-python PDF library capable of splitting, merging, cropping, and transforming PDF files Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity due to the inefficient decoding of ASCIIHexDecode streams. An attacker can cause excessive...
CVE-2026-0025
creationtimestamp| type| source ---|---|--- 2026-03-02 19:51:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mg3zpd2cf52v 2026-03-03 15:39:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mg642hwi4p2v...
CVE-2026-1841
creationtimestamp| type| source ---|---|--- 2026-03-02 12:33:36+00:00| seen| https://www.cert.si/si-cert-2026-02/...
BIT-SUPERSET-2026-23984 Apache Superset: SQLLab Read-Only Bypass on PostgreSQL
An Improper Input Validation vulnerability exists in Apache Superset that allows an authenticated user with SQLLab access to bypass the read-only verification check when using a PostgreSQL database connection. While the system effectively blocks standard Data Manipulation Language DML statements...
CVE-2026-3382
A security flaw has been discovered in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::BoxedNumber::getas of the file include/chaiscript/dispatchkit/boxednumber.hpp. Performing a manipulation results in memory corruption. The attack requires a local approach. The exploit...
CVE-2026-28423
Statmatic is a Laravel and Git powered content management system CMS. Prior to versions 5.73.11 and 6.4.0, when Glide image manipulation is used in insecure mode which is not the default, the image proxy can be abused by an unauthenticated user to make the server send HTTP requests to arbitrary...
OpenClaw Server-Side Request Forgery Vulnerability
OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a server-side request forgery vulnerability. The vulnerability stems from the fact that SSRF protection can be bypassed using a full form IPv4 mapping IPv6 literal, which can be exploited by an attacke...
CVE-2026-3384
CVE-2026-3384 affects ChaiScript up to 6.1.0. The vulnerability targets chaiscript_eval.hpp, specifically chaiscript::eval::AST_Node_Impl::eval and chaiscript::eval::Function_Push_Pop, causing uncontrolled recursion. Local attack required; exploit disclosed publicly. The project was informed via ...
CVE-2026-3383 ChaiScript boxed_number.hpp go divide by zero
A weakness has been identified in ChaiScript up to 6.1.0. This affects the function chaiscript::BoxedNumber::go of the file include/chaiscript/dispatchkit/boxednumber.hpp. Executing a manipulation can lead to divide by zero. The attack requires local access. The exploit has been made available to...
CVE-2026-3383
ChaiScript up to 6.1.0 is affected by a vulnerability in chaiscript::Boxed_Number::go (include/chaiscript/dispatchkit/boxed_number.hpp). Executing a manipulation can lead to divide by zero, requiring local access. A public exploit is available, and the project was informed via an issue report but...
CVE-2026-3382 ChaiScript boxed_number.hpp get_as memory corruption
A security flaw has been discovered in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::BoxedNumber::getas of the file include/chaiscript/dispatchkit/boxednumber.hpp. Performing a manipulation results in memory corruption. The attack requires a local approach. The exploit...
CVE-2026-3382
The CVE concerns ChaiScript up to 6.1.0, specifically the function chaiscript::Boxed_Number::get_as in include/chaiscript/dispatchkit/boxed_number.hpp. A manipulation can lead to memory corruption, with a local attack vector. The exploit has been released publicly and the issue was reported early...
CVE-2026-3382 ChaiScript boxed_number.hpp get_as memory corruption
A security flaw has been discovered in ChaiScript up to 6.1.0. The impacted element is the function chaiscript::BoxedNumber::getas of the file include/chaiscript/dispatchkit/boxednumber.hpp. Performing a manipulation results in memory corruption. The attack requires a local approach. The exploit...
