319498 matches found
CVE-2025-69111
Unauthenticated PHP Object Injection in Reisen = 1.4.1 versions...
Authorization Bypass Through User-Controlled Key
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key through the updateeventbyid process. An attacker can inject unauthorized events into another user's calendar by supplying a known calendarid as the destination...
@0xwork/connect (0.1.8), @a5c-ai/agent-platform (>=5.0.1-staging.19033314d476, <=5.0.1-staging.e195a4980892) +158 more potentially affected by CVE-2026-54327 via @earendil-works/pi-coding-agent (>=0.74.0, <=0.78.0)
@earendil-works/pi-coding-agent NPM version =0.74.0, =5.0.1-staging.19033314d476, =5.0.1-staging.19033314d476, =5.1.1-staging.00ceebd28cf2, =5.1.1-staging.00ceebd28cf2, =5.0.1-staging.19033314d476, =5.0.1-staging.3abdf9534c25, =0.6.10, =0.3.1, =2026.5.20-zh, =1.0.0-beta.10, =1.0.0-canary.9 -...
Laravel Framework: CRLF injection in default email rule
Summary A CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticated attacker to interfere with outbound email processing in applications that send mail to user-supplied...
EUVD-2025-210247
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in EMV JobCareer allows Path Traversal. This issue affects JobCareer: from n/a through 7.3...
CVE-2026-49113
Subscriber Arbitrary Code Execution in Cornerstone 7.8.8 versions...
CVE-2026-42380
Unauthenticated PHP Object Injection in AI Lab 5.4.2 versions...
CVE-2026-27429
Unauthenticated PHP Object Injection in Nifty = 1.4.1 versions...
CVE-2025-69168
Unauthenticated Local File Inclusion in Spike = 1.2 versions...
EUVD-2026-37693
Unauthenticated PHP Object Injection in ShiftUp = 1.3 versions...
EUVD-2026-37689
Unauthenticated PHP Object Injection in Hiroshi = 1.5.1 versions...
CVE-2025-69158
Technical details for CVE-2025-69158 are not provided in the connected documents. The initial description notes an unauthenticated Local File Inclusion in Granola
CVE-2025-69127
CVE-2025-69127 affects the WordPress theme “Plumbing - Plumber and Handyman WordPress Theme” (Plumbing) <= 1.6. Description: Unauthenticated PHP Object Injection in Plumbing <= 1.6. The available document set provides limited public details beyond the vulnerability type and affected version...
CVE-2025-69120
CVE-2025-69120 affects the WordPress Dazzle theme (
CVE-2026-48776
LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe URL path construction through unsanitized caller-supplied identifier values used in HTTP request paths for resource...
RHSA-2026:26460 Red Hat Security Advisory: 389-ds:1.4 security update
Bulletin has no description...
[SECURITY] Fedora 44 Update: openslide-4.0.0-14.fc44
The OpenSlide library allows programs to access virtual slide files regardless of the underlying image format...
RLSA-2026:26352 Moderate: opencryptoki security update
The opencryptoki packages contain version 2.11 of the PKCS11 API, implemented for IBM Cryptocards, such as IBM 4764 and 4765 crypto cards. These packages includes support for the IBM 4758 Cryptographic CoProcessor with the PKCS11 firmware loaded, the IBM eServer Cryptographic Accelerator FC 4960 ...
opencryptoki security update
An update is available for opencryptoki. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The opencryptoki packages contain version 2.11 of the PKCS11 API,...
CVE-2026-46766
creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-20 17:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moqfht63522k...