115144 matches found
CVE-2025-59020
The CVE-2025-59020 issue in TYPO3 CMS arises from abusing the defVals parameter to bypass field-level access checks during backend record creation. This allows insertion of data into restricted exclude fields for tables where the user has write access to a limited set of fields. Affected TYPO3 ve...
BIT-GHOST-2026-22596 Ghost has SQL Injection in Members Activity Feed
Ghost is a Node.js content management system. In versions 5.90.0 through 5.130.5 and 6.0.0 through 6.10.3, a vulnerability in Ghost's /ghost/api/admin/members/events endpoint allows users with authentication credentials for the Admin API to execute arbitrary SQL. This issue has been patched in...
WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability
WordPress JNews - Pay Writer plugin = 11.0.0 - Local File Inclusion vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin JNews - Pay Writer versions = 11.0.0...
CVE-2024-3049 affecting package booth for versions less than 1.2-1
CVE-2024-3049 affecting package booth for versions less than 1.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-66453 affecting package rhino for versions less than 1.7.15.1-1
CVE-2025-66453 affecting package rhino for versions less than 1.7.15.1-1. An upgraded version of the package is available that resolves this issue...
SUSE CVE-2026-22703
Cosign provides code signing and transparency for containers and binaries. Prior to versions 2.6.2 and 3.0.4, Cosign bundle can be crafted to successfully verify an artifact even if the embedded Rekor entry does not reference the artifact's digest, signature or public key. When verifying a Rekor...
TYPO3 CMS 安全漏洞
TYPO3 CMS is a content management system from TYPO3 open source. A security vulnerability exists in TYPO3 CMS that stems from the utilization of the defVals parameter that can bypass field-level access checks and may result in the insertion of arbitrary data into exclusion fields prohibited by a...
TYPO3 CMS 安全漏洞
TYPO3 CMS is a content management system from TYPO3 open source. A security vulnerability exists in TYPO3 CMS that originates from a back-end user with Recycle Bin Module access that can delete arbitrary data from any TCA-defined database table, potentially resulting in the erasure and corruption...
PT-2026-2787
Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 19.5.5 and earlier InDesign Desktop version 21.0 Description InDesign Desktop versions 19.5.5 and 21.0 and earlier are susceptible to a Heap-based Buffer Overflow that may lead to arbitrary code execution with the...
Linbit csync2 安全漏洞
Linbit csync2 is a cluster synchronization tool from Austrian company Linbit, which is primarily used to keep files on multiple hosts in a cluster synchronized. A security vulnerability exists in Linbit csync2 versions 4.6.0 through 4.9.0, which stems from a remote stack-based buffer overflow in...
PT-2026-2487
Name of the Vulnerable Software and Affected Versions Semantic machines version 5.4.8 Description An issue allows attackers to bypass authentication by sending a crafted HTTP request to various API endpoints. The attack targets authentication mechanisms within the software. The affected API...
MiracleLinux 9 : perl-FCGI-0.79-8.1.el9_6 (AXSA:2025-10601:01)
The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10601:01 advisory. perl-fcgi: FCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 aka fcgi library CVE-2025-40907 Tenable has extracte...
IBM DB2 Privilege Escalation (7250486) (Windows)
According to its self-reported version number, IBM Db2 on Windows may be affected by a vulnerability: - IBM Db2 12.1.0 through 12.1.2 for Linux, UNIX and Windows includes Db2 Connect Server could allow a local user to cause a denial of service due to improper neutralization of special elements in...
MiracleLinux 8 : tbb-2018.2-10.el8_10.1 (AXSA:2025-9640:02)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9640:02 advisory. jquery: Untrusted code execution via tag in HTML passed to DOM manipulation methods CVE-2020-11023 Tenable has extracted the preceding description block...
MiracleLinux 9 : sudo-1.9.5p2-10.el9_6.1 (AXSA:2025-10619:03)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10619:03 advisory. sudo: LPE via host option CVE-2025-32462 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note that...
AZL-74264 CVE-2026-22801 affecting package libpng for versions less than 1.6.54-1
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions pngwriteimage16bit and pngwriteimage8bit causes heap buffer...
CVE-2024-58339 LlamaIndex <= 0.12.2 VannaQueryEngine SQL Execution Allows Resource Exhaustion
LlamaIndex run-llama/llamaindex versions up to and including 0.12.2 contain an uncontrolled resource consumption vulnerability in the VannaPack VannaQueryEngine implementation. The customquery logic generates SQL statements from a user-supplied prompt and executes them via vn.runsql without...
CVE-2026-22801 LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions pngwriteimage16bit and pngwriteimage8bit causes heap buffer...
CVE-2026-22801
LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. From 1.6.26 to 1.6.53, there is an integer truncation in the libpng simplified write API functions pngwriteimage16bit and pngwriteimage8bit causes heap buffer...