Security

A security vulnerability has been detected in actiontech sqle up to 4.2511.0. The impacted element is an unknown function of the file sqle/utils/jwt.go of the component JWT Secret Handler. The manipulation of the argument JWTSecretKey leads…

nvd ·

Libredesk is a self-hosted customer support desk. Prior to version 0.8.6-beta, LibreDesk is vulnerable to stored HTML injection in the contact notes feature. When adding notes via POST /api/v1/contacts/{id}/notes, the backend automatically …

nvd ·

This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it.

cve-program ·

Vendor product: Agent for Windows

Axios Cache Interceptor is a cache interceptor for axios. Prior to version 1.11.1, when a server calls an upstream service using different auth tokens, axios-cache-interceptor returns incorrect cached responses, leading to authorization byp…

nvd ·

Hemmelig is a messing app with with client-side encryption and self-destructing messages. Prior to version 7.3.3, a Server-Side Request Forgery (SSRF) filter bypass vulnerability exists in the webhook URL validation of the Secret Requests f…

nvd ·

Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL encoding middleware bypass. A NestJS application is vulnerable if it uses `@nestjs/platform-fastify`; relies on `NestMi…

nvd ·

Gitea migration SSRF to reserved addresses through ALLOWED_DOMAINS

cve-program ·

Vendor product: gitea.dev

Gitea push-to-create bypass of FORCE_PRIVATE policy

cve-program ·

Vendor product: gitea.dev

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to modify the Enterprise Manager master key and stored antivirus update credentials.

cve-program ·

Vendor product: Backup and Replication

This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host.

cve-program ·

Vendor product: Backup and Replication

wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms

cve-program ·

Vendor product: wolfSSH

VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability

cve-program ·

Vendor product: VMware Workstation · Vendor product: VMware Fusion

VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability

cve-program ·

Vendor product: VMware Workstation · Vendor product: VMware Fusion

wolfSSHd on Windows race condition leading to logon token reused across connections

cve-program ·

https://github.com/wolfSSL/wolfssh: wolfSSH

wolfSSH ECDSA host key curve not validated against negotiated algorithm

cve-program ·

Vendor product: wolfSSH

A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources (CRs) that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker ca…

nvd ·

Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.19.0, an unauthenticated attacker can pollute the internal state (`restoreFilePath`) of the server via the `/skServer/validateBackup` endpoint.…

nvd ·

Signal K Server is a server application that runs on a central hub in a boat. A Denial of Service (DoS) vulnerability in versions prior to 2.19.0 allows an unauthenticated attacker to crash the SignalK Server by flooding the access request …

nvd ·

Signal K Server is a server application that runs on a central hub in a boat. An unauthenticated information disclosure vulnerability in versions prior to 2.19.0 allows any user to retrieve sensitive system information, including the full S…

nvd ·

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the appstore interface allow administrators to install npm packages through a REST API endpoint. While the endpoint validates that the…

nvd ·

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 expose two features that can be chained together to steal JWT authentication tokens without any prior authentication. The attack combines…

nvd ·

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the access request system have two related features that when combined by themselves and with an information disclosure vulnerability …

nvd ·

@stablelib/cbor: Prototype poisoning via `__proto__` map keys in CBOR decoding

osv · CVE-2026-106448

npm: @stablelib/cbor

@stablelib/cbor: Stack exhaustion Denial of Service via deeply nested CBOR arrays, maps, or tags

osv · CVE-2026-106447

npm: @stablelib/cbor

yawkat LZ4 Java: LZ4BlockInputStream allocates an unvalidated compressed length from the stream header

cve-program ·

Vendor product: lz4-java

Quadratic string concatenation in consumePhrase in net/mail

osv · BIT-golang-2026-42499 · CVE-2026-42499

Go: stdlib

Incorrect enforcement of email constraints in crypto/x509

osv · BIT-golang-2026-27137 · CVE-2026-27137

Go: stdlib

JsBraceDepth Context Tracking Bugs (XSS) in html/template

osv · BIT-golang-2026-32289 · CVE-2026-32289

Go: stdlib

Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http

osv · BIT-golang-2026-56853 · CVE-2026-56853

Go: stdlib

Quadratic string concatentation in consumeComment in net/mail

osv · BIT-golang-2026-39820 · CVE-2026-39820

Go: stdlib

Unbounded allocation for old GNU sparse in archive/tar

osv · BIT-golang-2026-32288 · CVE-2026-32288

Go: stdlib

Incorrect calculation in API in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Clickjacking in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Code injection in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Incorrect authorization in Input in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Clickjacking in Messages in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)

cve-program ·

Vendor product: Chrome

Missing authorization in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

cve-program ·

Vendor product: Chrome

Incorrect authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

cve-program ·

Vendor product: Chrome

WordPress Dynamic User Directory plugin <= 2.4 - SQL Injection vulnerability

cve-program ·

https://wordpress.org/plugins: dynamic-user-directory

WordPress affiliate-toolkit plugin <= 3.9.1 - SQL Injection vulnerability

cve-program ·

https://wordpress.org/plugins: affiliate-toolkit-starter

Incorrect authorization in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted Chrome extension. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Improper state validation in Autofill AI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

cve-program ·

Vendor product: Chrome

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Improper input validation in Compositing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Incorrect authorization in WebShare in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Incomplete cleanup in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. (Chromium security …

cve-program ·

Vendor product: Chrome