Thu, Mar 12 · 03:16 PM CDTCVE-2026-28384
9.9/10 · Must read/watchNVDvuln
Summary
An improper sanitization of the compression_algorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on the LXD server via API calls to the image and backup endpoints. This issue affected LXD from 4.12 through 6.6 and was fixed in the snap versions 5.0.6-e49d
CVECVE-2026-28384
SeverityCRITICAL
TypeUPDATED
PublishedThu, Mar 12 · 03:16 PM CDT
ModifiedFri, Sep 18 · 02:08 PM CDT
CVE-2018-13410
9.8/10 · Must read/watchNVDvuln
Summary
Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service (invalid free and application crash) or possibly have unspecified other impact because of an off-by-one error. NOTE: it is unclear whether there are realistic scenarios in which an untrusted party controls
CVECVE-2018-13410
SeverityCRITICAL
TypeUPDATED
PublishedFri, Jul 06 · 07:29 PM CDT
ModifiedFri, Sep 18 · 11:17 AM CDT
CVE-2025-39682
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different type than what has already been processed we brea
CVECVE-2025-39682
SeverityCRITICAL
TypeUPDATED
PublishedFri, Sep 05 · 06:15 PM CDT
ModifiedSat, Sep 19 · 04:17 AM CDT
CVE-2026-27446
9.8/10 · Must read/watchNVDvuln
Summary
Missing Authentication for Critical Function (CWE-306) vulnerability in Apache Artemis, Apache ActiveMQ Artemis. An unauthenticated remote attacker can use the Core protocol to force a target broker to establish an outbound Core federation connection to an attacker-controlled rogue broker. This could potentially result
CVECVE-2026-27446
SeverityCRITICAL
TypeUPDATED
PublishedWed, Mar 04 · 09:15 AM CST
ModifiedFri, Sep 18 · 01:17 PM CDT
CVE-2026-5189
9.8/10 · Must read/watchNVDvuln
Summary
CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 through 3.70.5 allows an unauthenticated attacker with network access to gain unauthorized read/write access to the internal database and execute arbitrary OS commands as the Nexus process user. Exploitation requires the non-defa
CVECVE-2026-5189
SeverityCRITICAL
TypeUPDATED
PublishedWed, Apr 15 · 07:16 PM CDT
ModifiedFri, Sep 18 · 03:37 PM CDT
CVE-2026-53176
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN In drivers/infiniband/ulp/isert/ib_isert.c, isert_login_recv_done() computes the login request payload length as wc->byte_len minus ISER_HEADERS_LEN with no lower bound, and login_req_len is a s
CVECVE-2026-53176
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jun 25 · 09:16 AM CDT
ModifiedFri, Sep 18 · 01:18 PM CDT
CVE-2025-49794
9.1/10 · Must read/watchNVDvuln
Summary
A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or
CVECVE-2025-49794
SeverityCRITICAL
TypeUPDATED
PublishedMon, Jun 16 · 04:15 PM CDT
ModifiedFri, Sep 18 · 06:17 PM CDT
CVE-2025-49796
9.1/10 · Must read/watchNVDvuln
Summary
A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive
CVECVE-2025-49796
SeverityCRITICAL
TypeUPDATED
PublishedMon, Jun 16 · 04:15 PM CDT
ModifiedFri, Sep 18 · 06:17 PM CDT
CVE-2026-33186
9.1/10 · Must read/watchNVDvuln
Summary
gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g.,
CVECVE-2026-33186
SeverityCRITICAL
TypeUPDATED
PublishedFri, Mar 20 · 11:16 PM CDT
ModifiedFri, Sep 18 · 01:17 PM CDT
CVE-2026-4408
9.0/10 · Must read/watchNVDvuln
Summary
A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-c
CVECVE-2026-4408
SeverityCRITICAL
TypeUPDATED
PublishedThu, May 28 · 09:16 AM CDT
ModifiedFri, Sep 18 · 01:18 PM CDT
CVE-2026-3199
8.8/10 · Worth your timeNVDvuln
Summary
A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execute arbitrary code, bypassing the nexus.scripts.allowCreation security control.
CVECVE-2026-3199
SeverityHIGH
TypeUPDATED
PublishedWed, Apr 08 · 11:16 PM CDT
ModifiedFri, Sep 18 · 04:11 PM CDT
CVE-2026-42503
8.8/10 · Worth your timeNVDvuln
Summary
gopls by default communicates via pipe. However, -port and -listen flags are supported as means of debugging. If -listen is given a value without an explicit host (e.g. :8080), or -port is used, gopls will listen on 0.0.0.0. As a result, users might inadvertently cause gopls to bind 0.0.0.0. This can allow a malicious
CVECVE-2026-42503
SeverityHIGH
TypeUPDATED
PublishedWed, May 06 · 05:16 PM CDT
ModifiedFri, Sep 18 · 03:16 PM CDT
CVE-2026-43112
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced.
CVECVE-2026-43112
SeverityHIGH
TypeUPDATED
PublishedWed, May 06 · 10:16 AM CDT
ModifiedFri, Sep 18 · 01:18 PM CDT
CVE-2026-45447
8.8/10 · Worth your timeNVDvuln
Summary
Issue summary: A specially crafted PKCS#7 or S/MIME signed message could trigger a use-after-free during PKCS#7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS#7 or S/MIME signed message, if the SignedD
CVECVE-2026-45447
SeverityHIGH
TypeUPDATED
PublishedTue, Jun 09 · 05:17 PM CDT
ModifiedFri, Sep 18 · 01:18 PM CDT
CVE-2026-47162
8.8/10 · Worth your timeNVDvuln
Summary
Vim is an open source, command line text editor. Prior to version 9.2.0495, a Vimscript code injection vulnerability exists in s:NetrwBookHistSave() in the netrw plugin (runtime/pack/dist/opt/netrw/autoload/netrw.vim) when serializing browsed directory paths to the history file ~/.vim/.netrwhist. A directory name deriv
CVECVE-2026-47162
SeverityHIGH
TypeUPDATED
PublishedThu, Jun 11 · 07:16 PM CDT
ModifiedFri, Sep 18 · 01:18 PM CDT
CVE-2026-48169
8.8/10 · Worth your timeNVDvuln
Summary
PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the PraisonAI Platform API have two authorization failures that together break workspace isolation. The service layer for issues and projects performs global primary-key lookups without checking workspace ownership, so any authenticated user can read,
CVECVE-2026-48169
SeverityHIGH
TypeUPDATED
PublishedFri, Aug 07 · 10:16 PM CDT
ModifiedFri, Sep 18 · 08:09 PM CDT
CVE-2026-53266
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address rewrite behind skb_ensure_writable(skb, 0). This is intentional: at the bridge ebtables hooks the Ethernet header is addressed through skb_
CVECVE-2026-53266
SeverityHIGH
TypeUPDATED
PublishedThu, Jun 25 · 09:16 AM CDT
ModifiedSat, Sep 19 · 04:17 AM CDT
CVE-2026-45674
8.7/10 · Worth your timeNVDvuln
Summary
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses. Versions 4.1.135.Final and 4.2.15.Final patch the issue.
CVECVE-2026-45674
SeverityHIGH
TypeUPDATED
PublishedFri, Jun 12 · 03:16 PM CDT
ModifiedFri, Sep 18 · 01:18 PM CDT
CVE-2026-47691
8.7/10 · Worth your timeNVDvuln
Summary
Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's `DnsResolveContext` insufficiently validates the bailiwick of NS records, enabling DNS Cache Poisoning. An attacker controlling an authoritative name server for a subdomain
CVECVE-2026-47691
SeverityHIGH
TypeUPDATED
PublishedFri, Jun 12 · 04:16 PM CDT
ModifiedFri, Sep 18 · 01:18 PM CDT
CVE-2026-70492
8.7/10 · Worth your timeNVDvuln
Summary
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/Markdown/KatexRenderer.svelte could store and render a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. The catch branch fell bac
CVECVE-2026-70492
SeverityHIGH
TypeUPDATED
PublishedTue, Aug 04 · 09:16 PM CDT
ModifiedFri, Sep 18 · 02:47 PM CDT
CVE-2026-33810
8.2/10 · Worth your timeNVDvuln
Summary
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in th
CVECVE-2026-33810
SeverityHIGH
TypeUPDATED
PublishedWed, Apr 08 · 02:16 AM CDT
ModifiedFri, Sep 18 · 01:17 PM CDT
CVE-2026-34982
8.2/10 · Worth your timeNVDvuln
Summary
Vim is an open source, command line text editor. Prior to version 9.2.0276, a modeline sandbox bypass in Vim allows arbitrary OS command execution when a user opens a crafted file. The `complete`, `guitabtooltip` and `printheader` options are missing the `P_MLE` flag, allowing a modeline to be executed. Additionally, t
CVECVE-2026-34982
SeverityHIGH
TypeUPDATED
PublishedMon, Apr 06 · 04:16 PM CDT
ModifiedFri, Sep 18 · 01:18 PM CDT
CVE-2026-70486
8.2/10 · Worth your timeNVDvuln
Summary
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, the terminal file-preview serveUrl iframe branch always granted allow-same-origin together with allow-scripts for HTML files served from the application origin. Any authenticated user with access to a configur
CVECVE-2026-70486
SeverityHIGH
TypeUPDATED
PublishedTue, Aug 04 · 08:16 PM CDT
ModifiedFri, Sep 18 · 02:46 PM CDT
CVE-2025-20160
8.1/10 · Worth your timeNVDvuln
Summary
A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication. This vulnerability exists because the system does not properly check whether the required TACACS+ shared secret i
CVECVE-2025-20160
SeverityHIGH
TypeUPDATED
PublishedWed, Sep 24 · 06:15 PM CDT
ModifiedFri, Sep 18 · 01:18 PM CDT
CVE-2026-42790
8.1/10 · Worth your timeNVDvuln
Summary
Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS nameConstraints bypass via subject CommonName fallback in TLS hostname verification. Two flaws combine to allow a subordinate CA whose DNS nameConstraints are restricted (e.g. permitted;DNS:allowed.e
CVECVE-2026-42790
SeverityHIGH
TypeUPDATED
PublishedWed, May 27 · 05:16 PM CDT
ModifiedFri, Sep 18 · 01:18 PM CDT
