286759 matches found
MGASA-2026-0466 Updated python-urwid & python-wcwidth packages fixes a security vulnerability
Insecure PRNG and Information Exposure in urwid Web Display Backend...
GHSA-M9GG-HP2V-232J vulnerabilities
Vulnerabilities for packages: langfuse, dotstatsuite-supercore, zitadel, pulumi, azurite, kibana, homepage, langfuse-fips, opentelemetry-auto-instrumentations-node, cadence-web, librechat...
CVE-2026-101915 vulnerabilities
Vulnerabilities for packages: langfuse, dotstatsuite-supercore, zitadel, pulumi, azurite, kibana, homepage, langfuse-fips, opentelemetry-auto-instrumentations-node, cadence-web, librechat...
CVE-2026-101916 vulnerabilities
Vulnerabilities for packages: langfuse, dotstatsuite-supercore, zitadel, pulumi, azurite, kibana, homepage, langfuse-fips, opentelemetry-auto-instrumentations-node, cadence-web, librechat...
GHSA-F596-WHHP-79R4 vulnerabilities
Vulnerabilities for packages: langfuse, dotstatsuite-supercore, zitadel, pulumi, azurite, kibana, homepage, langfuse-fips, opentelemetry-auto-instrumentations-node, cadence-web, librechat...
Path traversal vulnerability in FUJIFILM Business Innovation and Sharp MFPs (multifunction printers)
Overview Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Sharp Corporation contain a path traversal vulnerability. Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 - CVE-2026-78249 FUJIFILM Business Innovation Corp. report...
EUVD-2026-91067
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting XSS. This issue affects CAPEC-63: before 3.0b63...
EUVD-2009-5122
Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properly validate the input length before...
PT-2026-104340
Name of the Vulnerable Software and Affected Versions TurkHotspot versions through 2026-10-02 Description Improper neutralization of input during web page generation allows Reflected Cross-Site Scripting XSS, a condition where an application includes untrusted data in a web page without proper...
Gitea ServeAttachment Disclosure
The vulnerability of the ServeAttachment function in the routers/web/repo/attachment.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to disclose sensitive informatio...
Gitea oauth2UpdateAvatarIfNeed Disclosure
The vulnerability of the oauth2UpdateAvatarIfNeed function in the routers/web/auth/oauth.go file of the Git repository management system Gitea is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...
Gitea Locale DoS
The vulnerability of the Locale function in the modules/web/middleware/locale.go file of the Git repository management system Gitea is related to the improper implementation of flow control. Exploiting this vulnerability could allow a malicious actor to cause service failures...
PT-2026-105490
Summary The openUrl function in @a2ui/web core passes an agent-controlled URL directly to window.open without validating the URI scheme. A malicious agent can supply a javascript: URI as the url argument of a Button component's functionCall action. When the user clicks the rendered button,...
CVE-2026-75937: Improper Neutralization of Special Elements used in an OS Command
A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device...
PT-2026-104176
Name of the Vulnerable Software and Affected Versions All in One SEO versions prior to 5.0.1.2 Description Insufficient input sanitization and output escaping allow unauthenticated attackers to perform DOM-Based Cross-Site Scripting XSS via the URL pathname. This occurs when a user with the aiose...
CVE-2026-104610: Stack-based Buffer Overflow
A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...
CVE-2026-5782: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in MRV Technology Foreign Trade Ltd. Co. TurkHotspot allows Reflected XSS. This issue affects TurkHotspot: through 2026-10-02. NOTE: The vendor was contacted and it was learned that the product is not...
Uniview IP Cameras Improper Authentication (CVE-2023-0773)
Some Uniview IPC products have an access control vulnerability in their web-based management interface. A remote, unauthenticated attacker can send specially crafted HTTP requests to modify device user credentials. Successful exploitation of this vulnerability could allow the attacker to gain...
ROS-20261002-73-0140
The vulnerability in Jetty is related to incorrect data encoding according to the Punycode standard. Exploiting this vulnerability can allow a remote attacker to cause failures in the web application...