2275 matches found
EUVD-2026-42069
An improper access check allows privileged users to overwrite media files without editing permissions...
CVE-2026-14935
A logic vulnerability was found in GStreamer's webrtcbin component. The checksdpcrypto function contains an inverted boolean condition that causes it to accept remote SDP offers or answers that lack the required a=fingerprint attribute, while incorrectly rejecting those that include it. An attack...
GO-2026-5818 Mattermost doesn't sanitize team member data when returned via API to users without elevated permissions in github.com/mattermost/mattermost-server
Mattermost doesn't sanitize team member data when returned via API to users without elevated permissions in github.com/mattermost/mattermost-server...
CVE-2026-8926
A flaw was found in curl. When curl is configured to use a .netrc file for credentials and a URL is provided with a username but no password, curl may incorrectly retrieve and use the password for a different user from the .netrc file for the same host. This could lead to unauthorized information...
DEBIAN-CVE-2026-55380
Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile.open read image dimensions from the GD 2.x header and stored them in self.size without calling Image.decompressionbombcheck, allowing a crafted .gd file to trigger excessive C-heap allocation when loaded. This iss...
ECHO-6D1E-5C87-D38E
Bulletin has no description...
ECHO-4454-6933-C9EE
Bulletin has no description...
Adobe ColdFusion arbitrary file upload vulnerability
Adobe ColdFusion is a rapid web application development platform provided by the American company Adobe. Adobe ColdFusion has a vulnerability related to arbitrary file uploads. This vulnerability stems from the upload of dangerous types of files without restrictions, allowing attackers to execute...
MINI-QMVC-7597-F4RW
Bulletin has no description...
BELL-CVE-2026-47254
Bulletin has no description...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the repository feed endpoints. An attacker can access private repository commit data by using API tokens that lack the required repository scope. Remediation Upgrade github.com/go-gitea/gitea/routers/web/feed...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the repository feed endpoints. An attacker can access private repository commit data by using API tokens that lack the required repository scope. Remediation Upgrade gitea.dev/services/convert to version 1.26...
MINI-7C59-4PMJ-GM2V
Bulletin has no description...
MINI-WXWC-J2R5-857G
Bulletin has no description...
MINI-35VF-RF4X-8FFV
Bulletin has no description...
ECHO-496E-C070-4EC0
Bulletin has no description...
MINI-QFM6-XXJV-P7QW
Bulletin has no description...
MINI-2HH2-X2GH-F3J2
Bulletin has no description...