CVE-2026-5147Published
YunaiV yudao-cloud get-by-website sql injection
cve-program ·
Vendor product: yudao-cloud
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
680013 source statements · aliases may refer to the same vulnerabilityCVE-2026-110640Published
Whisper-node through 1.1.1 OS Command Injection via filePath and language
cve-program ·
https://registry.npmjs.org: whisper-node
CVE-2026-110845Published
n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation
cve-program ·
Vendor product: n8n
CVE-2026-116369Published
Sunwood-ai-labs github-kanban-mcp-server issue-handlers.ts handleListIssues os command injection
cve-program ·
Vendor product: github-kanban-mcp-server
CVE-2026-93846Published
Team admin can escalate a team member's permissions via the team member roles endpoint
cve-program ·
Vendor product: Mattermost
CVE-2026-112344Published
Syncplify Server! < 8.8.0 Symbolic Link Jail Escape
cve-program ·
Vendor product: Syncplify Server!
CVE-2026-112343Published
Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing
cve-program ·
Vendor product: Syncplify Server!
CVE-2026-76300Published
Security Hardening in Splunk Enterprise - October 2026
cve-program ·
Vendor product: Splunk Enterprise
CVE-2026-76526Published
Improper Neutralization in Splunk SOAR
cve-program ·
Vendor product: Splunk SOAR
CVE-2026-115188Published
An unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, the application copies the bundled asset files into a publicly accessible media directory without res…
cve-program ·
https://packagist.org: mautic/core
CVE-2026-115189Published
A server-side template injection vulnerability exists in the Twig theme rendering sandbox of Mautic. The sandbox introduced to restrict user-uploaded theme templates (the fix for GHSA-9fx4-7cmj-47vg) does not fully enforce its restrictions,…
cve-program ·
https://packagist.org: mautic/core
CVE-2026-115190Published
An insecure deserialization (PHP object injection) vulnerability exists in Mautic's handling of segment filters and custom field properties. Several code paths that read these stored values from the database deserialize them without restric…
cve-program ·
https://packagist.org: mautic/core
CVE-2026-115191Published
A SQL injection vulnerability exists in a contact lookup AJAX endpoint of the Mautic administration interface (/s/ajax). A request parameter that selects the contact field to search by is not properly validated before it is used in a databa…
cve-program ·
https://packagist.org: mautic/core
CVE-2026-115192Published
An SQL Injection vulnerability exists in the dashboard widget data API endpoint (/api/data/{type}). Chart filter parameters supplied by the client are not properly validated before they are used in the database queries that build dashboard …
cve-program ·
https://packagist.org: mautic/core
CVE-2026-115193Published
A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7. Values of HTML-type custom contact fields are rendered without output sanitization. A user or integration able to write a value to such a field…
cve-program ·
https://packagist.org: mautic/core
CVE-2026-115194Published
A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through the API, the supplied file path is not restricted to the asset upload directory. An authenticated API user with permission to create assets c…
cve-program ·
https://packagist.org: mautic/core
CVE-2026-115195Published
A broken access control vulnerability exists in the Mautic Stats API (/api/stats/{table}). The endpoint did not enforce permissions for several internal tables: an intended administrator-only restriction was never applied, and tables withou…
cve-program ·
https://packagist.org: mautic/core
CVE-2026-115196Published
An Open Redirect vulnerability exists in the public form submission endpoint (/form/submit) of Mautic. After a form is submitted, the application redirects the visitor to a return address supplied with the submission without verifying that …
cve-program ·
https://packagist.org: mautic/core
CVE-2026-59106Published
Unauthenticated RCE Vulnerability in WolfProt interface implementation
cve-program ·
Vendor product: Cynap Pure (Next Gen), Cynap Bridge · Vendor product: Cynap Pro, Cynap Core Pro, Cynap Receiver, Cynap Pure, Cynap Pure Mini, Cynap Pure Pro · Vendor product: Cynap Videobar, Firmware Version
CVE-2026-108525Published
HTTP/2 inbound flow control is not enforced, letting a client queue unbounded DATA in stream processes in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
CVE-2026-115269Published
HTTP/2 WINDOW_UPDATE and SETTINGS frames reset the request body read timeout in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
CVE-2026-114216Published
Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
CVE-2026-114213Published
WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
CVE-2026-113436Published
Quadratic bignum parsing of Content-Length and Host port values in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
CVE-2026-111101Published
HTTP/1.1 chunked request bodies made of 1-byte chunks amplify memory use in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
CVE-2026-111103Published
HTTP/2 StreamError recovery rolls back connection state and bypasses per-connection limits in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
CVE-2026-109584Published
HTTP/2 cookie crumb join expands a small HPACK header block into an unbounded allocation in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
CVE-2026-110499Published
Client-chosen HPACK encoder table size is applied uncapped, growing per-connection state with every response in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
CVE-2026-108529Published
SETTINGS and stream-0 WINDOW_UPDATE frames trigger quadratic work over blocked streams in Bandit
cve-program ·
https://repo.hex.pm: bandit · https://github.com: mtrudel/bandit
CVE-2026-112880Published
CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney
cve-program ·
https://repo.hex.pm: hackney · https://github.com: benoitc/hackney
CVE-2026-97200Published
Unbounded response body buffering and decompression in hackney
cve-program ·
https://repo.hex.pm: hackney · https://github.com: benoitc/hackney
CVE-2026-116516Published
Insufficient length validation when parsing Zoom chat transcriptions
cve-program ·
Vendor product: Mattermost
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.