CVE-2026-100387

The pgPointcloud extension, through version 1.2.5 , contains a heap out-of-bounds read vulnerability during dimensional patch WKB deserialization . Authenticated database users can exploit this by providing crafted pcpatch values with attacker-controlled size fields. This allows the attacker to r...

CVE-2026-96879

The Mediawiki - FlaggedRevs extension (up to version 1.46.0 ) from the Wikimedia Foundation is vulnerable to the improper removal of sensitive information before storage or transfer. Specifically, the "Checked by" label in page history may be displayed even when the underlying review log entry is...

CVE-2026-6103

The php language environment is vulnerable to an integer overflow in the phar_tar_number() function. The function fails to perform an overflow check when parsing the 11-octal-digit size field of a TAR header into a uint32_t. Consequently, sizes exceeding 0xFFFFFFFF silently wrap, causing the pars...

CVE-2026-93682

The PHP language is vulnerable to an out-of-bounds read in the HTTP stream wrapper . When following a redirect where the response contains an empty Location header, the redirect code reads one byte past the end of the heap buffer. This allows a malicious server to manipulate the redirect target, ...

CVE-2026-100368

The CliInvoke.Specializations .NET library contains an OS command injection vulnerability in its PowerShell and Cmd shell wrappers (specifically PowershellProcessInvoker, CmdProcessInvoker, and UsePowerShell/UseCmd middleware). The root cause is that the wrappers pass caller-controlled targets an...

CVE-2026-96878

The Mediawiki - Cargo extension is vulnerable to Reflected XSS due to improper neutralization of input during web page generation. This security flaw affects versions through 3.9.4 . While the primary description identifies it as Reflected XSS, a related record mentions the Cargo Exhibit field al...

CVE-2026-96877

The Mediawiki - Cargo extension is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This issue specifically affects versions through 3.9.4 and occurs via the Cargo Drilldown full-text search functionality. While the docu...

CVE-2026-100208

A vulnerability exists in Microsoft Office Outlook due to an integer overflow or wraparound condition. This flaw allows an unauthorized attacker to achieve remote code execution over a network. While specific component details or patch versions are not provided in the documents, the vulnerability...

CVE-2026-100373

OpenMetadata versions through 2.0.2 are vulnerable to a server-side request forgery (SSRF) vulnerability within the URLValidator.validateURL function. The root cause is a failure to properly resolve DNS hostnames and validate internal addresses. Specifically, users with permissions to create or u...

CVE-2026-100372

ClipBucket v5 versions prior to 5.5.3-#197 are vulnerable to a path traversal vulnerability within the admin template editor. Authenticated users with manage_template_access permissions can exploit the folder parameter by providing directory traversal sequences to move outside the layout director...

CVE-2026-100310

The GNU libextractor library (versions

CVE-2026-96876

The Mediawiki - Cargo extension is vulnerable to Reflected XSS due to improper neutralization of input during web page generation. This specific vulnerability occurs within the CargoExport component during invalid-alias errors . The issue affects versions of the extension through 3.9.4 . No speci...

CVE-2026-96875

The Mediawiki - Cargo extension is vulnerable to a Stored Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This vulnerability affects versions through 3.9.4 . While one record identifies the flaw in the context of Cargo Drilldown hierarchy filter...

CVE-2026-5267

The Ciena Navigator Network Control Suite (NCS) is affected by an information exposure vulnerability in its event-streaming API . The root cause is a failure to properly enforce authentication , which allows an unauthenticated attacker with network access to the affected service to access the eve...

CVE-2026-100306

The TDuck survey form versions through 6.0 are vulnerable to a Write Password Bypass because the application only enforces password checks on the front end. Remote unauthenticated attackers can bypass these protections by submitting form entries directly to the public submission APIs using a form...

CVE-2026-100305

The TDuck survey form (versions through 6.0) contains a vulnerability where the authenticated submission endpoint POST /user/form/data/create fails to enforce form fill-in restrictions. Authenticated attackers who possess a form's key can submit unlimited entries to any form. This bypasses critic...

CVE-2026-100304

TDuck survey form 6.0 is vulnerable to an information disclosure vulnerability within the FormAuthUtils.hasPermission component. The issue stems from a fail-open mechanism that occurs when a form no longer exists. This allows authenticated users to access deleted form submissions by providing a k...

CVE-2026-100303

The TDuck survey form (versions through 6.0 ) is vulnerable to a broken access control issue due to missing authorization checks on the FormThemeController write endpoints. This allows authenticated non-admin users to perform unauthorized actions, such as adding, modifying, or deleting global for...

CVE-2026-97897

A security flaw exists in Krayin laravel-crm versions up to 2.2.5 . The vulnerability resides in the Sanitizer.php file of the TinyMCE Media Upload component, where improper processing allows for cross-site scripting (XSS) . This flaw can be triggered via a remote attack. To remediate this issue,...

CVE-2026-53629

The asset management software GLPI is vulnerable to a blind SQL injection in the history log filter (referred to as LogBleed ) affecting versions from 9.4.0 until 10.0.26 and 11.0.8 . The root cause is located in the Log::convertFiltersValuesToSqlCriteria() function, which fails to properly handl...