Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-115933
  • github.com/gitroomhq/postiz-app
 Forged signed tokens let any registered user take over other users and... 22 hours ago
  • Fix available
  • Severity - 9.9 (Critical)
CVE-2026-115557
  • github.com/python/cpython
 Distrust compromised intermediate certificates in ssl module 22 hours ago
  • Fix available
  • Severity - 9.4 (Critical)
PSF-2026-46
  • github.com/python/cpython
 Python has added a denylist for known compromised certificates to the "ssl"... 22 hours ago
  • Fix available
CVE-2026-114629
  • github.com/p5sagit/web-simple
 Web::Simple versions before 0.035 for Perl allocate a buffer sized by the... 23 hours ago
  • Fix available
CVE-2026-115932
  • github.com/gitroomhq/postiz-app
 Path traversal in post media lets any registered user read server files yesterday
  • Fix available
  • Severity - 9.6 (Critical)
CVE-2026-116019
  • github.com/getgrav/grav
 Grav 2.0.15 before 2.2.13 Allowlist Bypass via Flex Form Override Directives yesterday
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-116018
  • github.com/onearmy/community-platform
 ONEARMY community-platform before 2.165.2 IDOR via notification read endpoint yesterday
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-116017
  • github.com/xinnan-tech/xiaozhi-esp32-server
 Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint yesterday
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-116016
  • github.com/yunaiv/yudao-cloud
 yudao-cloud through 2026.09 Data Permission Bypass via data-permission-enable... yesterday
  • Fix available
  • Severity - 7.1 (High)
CVE-2026-116015
  • github.com/yunaiv/yudao-cloud
 yudao-cloud through 2026.09 IDOR via after-sale-log list endpoint yesterday
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-116014
  • github.com/open62541/open62541
 open62541 1.5.0 before 1.5.7 Integer Overflow Heap Buffer Overflow via Custom... yesterday
  • Fix available
  • Severity - 9.2 (Critical)
CVE-2026-116013
  • github.com/openresty/lua-resty-dns
 OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing yesterday
  • Fix available
  • Severity - 6.3 (Medium)
CVE-2026-116012
  • github.com/nationalsecurityagency/ghidra
 Ghidra before 12.2 Integer Truncation in PackedDecode::skipAttribute Decompiler... yesterday
  • Fix available
  • Severity - 2.0 (Low)
CVE-2026-116011
  • github.com/crowcpp/crow
 Crow before 1.3.4 Denial of Service via Deeply Nested JSON in... yesterday
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-116010
  • gitlab.com/francoisjacquet/rosariosis
 RosarioSIS before 12.9.1 Missing Authorization in Teacher Save Handlers yesterday
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-116009
  • github.com/owen2345/camaleon-cms
 Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action yesterday
  • Fix available
  • Severity - 8.7 (High)
Load more...