CVE-2026-33026: Cleartext Storage of Sensitive Information

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui backup restore mechanism allows attackers to tamper with encrypted backup archives and inject malicious configuration during restoration. This issue has been patched in version 2.3.4...

CVE-2026-33029: Improper Input Validation

Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, an input validation vulnerability in the logrotate configuration allows an authenticated user to cause a complete Denial of Service DoS. By submitting a negative integer for the rotation interval, the backend enter...

PT-2026-33146

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.101 Description An out of bounds read in the Media component allows a remote attacker to execute arbitrary code. This occurs when a user is convinced to perform specific UI gestures while interacting...

CVE-2026-33029

creationtimestamp| type| source ---|---|--- 2026-03-28 03:20:34+00:00| published-proof-of-concept| https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-cp8r-8jvw-v3qg...

CVE-2026-33027

creationtimestamp| type| source ---|---|--- 2026-03-28 03:19:28+00:00| published-proof-of-concept| https://github.com/0xJacky/nginx-ui/security/advisories/GHSA-m8p8-53vf-8357...

OpenUI 代码注入漏洞

OpenUI is an open source UI program. A cross-site scripting vulnerability exists in OpenUI 1.0 and earlier versions. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the file frontend/public/annotator/index.html, which can be exploited by an...

EUVD-2026-16490

Local Incus UI web server vulnerable to nuthentication bypass...

GHSA-HXV8-4J4R-CQGV vulnerabilities

Vulnerabilities for packages: kubescape, kubescape-operator, hubble, hubble-ui...

CVE-2026-33726 vulnerabilities

Vulnerabilities for packages: kubescape, kubescape-operator, hubble, hubble-ui...

CVE-2026-33726 vulnerabilities

Vulnerabilities for packages: hubble-fips, hubble, kubescape-operator, kubescape-operator-fips, hubble-ui-backend-fips, kubescape, kubescape-server, hubble-ui, kubescape-server-fips...

EUVD-2026-16420

In the Drupal 7 Internationalization i18n module, the i18nnode submodule allows a user with both "Translate content" and "Administer content translations" permissions to view and attach unpublished nodes via the translation UI and its autocomplete widget. This bypasses intended access controls an...

CVE-2026-28786

creationtimestamp| type| source ---|---|--- 2026-03-26 23:29:07+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-vvxm-vxmr-624h...

CVE-2026-29071

creationtimestamp| type| source ---|---|--- 2026-03-26 23:27:51+00:00| published-proof-of-concept| https://github.com/open-webui/open-webui/security/advisories/GHSA-w9f8-gxf9-rhvw...

CVE-2026-33898 Local Incus UI web server vulnerable to nuthentication bypass

Incus is a system container and virtual machine manager. Prior to version 6.23.0, the web server spawned by incus webui incorrectly validates the authentication token such that an invalid value will be accepted. incus webui runs a local web server on a random localhost port. For authentication, i...

CVE-2026-0748 Access bypass in Drupal 7 i18n_node translation UI

In the Drupal 7 Internationalization i18n module, the i18nnode submodule allows a user with both "Translate content" and "Administer content translations" permissions to view and attach unpublished nodes via the translation UI and its autocomplete widget. This bypasses intended access controls an...

CVE-2026-0748

In the Drupal 7 Internationalization i18n module, the i18nnode submodule allows a user with both "Translate content" and "Administer content translations" permissions to view and attach unpublished nodes via the translation UI and its autocomplete widget. This bypasses intended access controls an...

CVE-2026-0748

CVE-2026-0748 affects the Drupal 7 Internationalization (i18n) module, specifically the i18n_node submodule. The vulnerability allows a user who has both Translate content and Administer content translations permissions to view and attach unpublished nodes via the translation UI and its autocompl...

CVE-2026-0748 Access bypass in Drupal 7 i18n_node translation UI

In the Drupal 7 Internationalization i18n module, the i18nnode submodule allows a user with both "Translate content" and "Administer content translations" permissions to view and attach unpublished nodes via the translation UI and its autocomplete widget. This bypasses intended access controls an...

GHSA-4773-3JFM-QMX3 vulnerabilities

Vulnerabilities for packages: kafbat-ui-fips, nacos, apache-activemq, camunda, camunda-zeebe, conductor-fips, conductor, nacos-docker, kafbat-ui, kayenta, thingsboard, kayenta-fips, apache-nifi-registry, apache-activemq-fips...

GHSA-6HCQ-HMM3-JJ3C vulnerabilities

Vulnerabilities for packages: kafbat-ui-fips, nacos, apache-activemq, camunda, camunda-zeebe, conductor-fips, conductor, nacos-docker, kafbat-ui, kayenta, thingsboard, kayenta-fips, apache-nifi-registry, apache-activemq-fips...