EUVD-2026-57252

A party with write access to stored session data may affect JFrog Artifactory under specific conditions...

CVE-2026-68756 Potential insecure deserialization in JFrog Artifactory

A party with write access to stored session data may affect JFrog Artifactory under specific conditions...

CVE-2026-66382 Authenticated users may write files outside the intended Artifactory work directory

An authenticated user may write files outside the intended Artifactory work directory under specific conditions...

CVE-2026-66382

Technical details for CVE-2026-66382 are not publicly available in the provided documents. Monitor official advisories for updates.

EUVD-2026-57251

An authenticated user may write files outside the intended Artifactory work directory under specific conditions...

CVE-2026-18171

CVE-2026-18171 affects Docker Sandboxes (sbx) where the read-only intent of a runtime host mount is applied only to the in-guest bind; the virtio-fs host-edge grant is added to the sandbox policy-share allowlist with no access mode. The result is that the directory remains writable at the shared-...

Exploit for Out-of-bounds Write in Apple Ipados

CVE-2026-28956 Donate Support the maintenance of this pro...

CVE-2026-67286 Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0

Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name...

CVE-2026-67286

Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name...

CVE-2026-67286 Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0

Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name...

EUVD-2026-57216

Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name...

CVE-2026-67286

CVE-2026-67286 affects the Joomla extension for SP Page Builder by joomshaper.com prior to version 6.8.0. The issue allows an unauthenticated attacker to create arbitrary directories and write files using a predefined name, enabling potential local impact on the affected site. The provided metric...

CVE-2026-47230

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php mode filerenamesave shares the same root-cause shape as the cross-folder move bug 05-documents-cross-folder-move-idor.md: the top-level rights check at lines 79-89 validates hasUploadRight on...

EUVD-2026-57207

Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php mode filerenamesave shares the same root-cause shape as the cross-folder move bug 05-documents-cross-folder-move-idor.md: the top-level rights check at lines 79-89 validates hasUploadRight on...

Security update for libheif

This update for libheif fixes the following issues: Update to version 1.23.1 jscPED-16355. Security issues fixed: CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application bsc1273079. CVE-2026-62291: heap out-of-bounds write in the uncompressed encoder when...

SUSE-SU-2026:3597-1 Security update for libheif

This update for libheif fixes the following issues: Update to version 1.23.1 jscPED-16355. Security issues fixed: - CVE-2026-62289: integer underflow in Fraction constructor via double clap transform application bsc1273079. - CVE-2026-62291: heap out-of-bounds write in the uncompressed encoder wh...

kernel: udf: fix partition descriptor append bookkeeping

A flaw was found in the Linux kernel's Universal Disk Format UDF filesystem. A remote attacker could exploit this vulnerability by tricking a user into mounting a specially crafted UDF image containing repeated partition descriptors. This could lead to a heap out-of-bounds write, potentially...

CVE-2026-73234

A flaw was found in FreeCAD. An attacker can craft a malicious .FCStd archive that, when opened by a user, exploits a path traversal vulnerability in the PropertyFileIncluded::Restore function. This allows the attacker to write arbitrary files to locations accessible by the FreeCAD user,...

OPENSUSE-SU-2026:21572-1 Security update for ffmpeg-7

This update for ffmpeg-7 fixes the following issues: - CVE-2026-64830: Heap Buffer Overflow via VobSub Subtitle Demuxer bsc1272752. - CVE-2026-64832: Double-Free in NVDEC Hardware Decoder via nvdec.c bsc1272754. - CVE-2026-64835: Out-of-Bounds Memory Access in ADX Audio Decoder bsc1272758. -...

CVE-2026-12235

The Linkable Loadable Extensions llext subsystem mis-handles PLT/RELA relocation entries when linking a relocatable partially-linked ELF extension. In llextlinkplt subsys/llext/llextlink.c, the relocatable branch tgt != NULL, the path used for Xtensa relocatable objects computed the patch address...