GNU Gatekeeper (gnugk) versions before 5.16 contain an out-of-bounds read vulnerability in the H46024Socket::ReceivedProbePacket() function. This flaw allows remote attackers to cause a heap over-read by sending short probe packets, specifically short application-defined RTCP packets during H.460.24 probing. The vulnerability may lead to a crash of the gatekeeper service but does not impact confidentiality or integrity.
A path traversal vulnerability exists in phpMyAdmin MoTranslator up to version 6.0.1 in the Loader::getTranslator function. This flaw allows remote attackers with low privileges to manipulate the locale argument, potentially leading to unauthorized file access. The vulnerability has a medium severity score of 6.3 and public exploit details have been disclosed. The vendor has not responded to the disclosure, and no patch information is available.
NetBox versions from 2.9.0 up to but not including 4.7.4 contain a broken access control vulnerability in the BulkComponentCreateView. This flaw allows authenticated users with add-component permission to bypass view permissions on parent devices and virtual machines. Exploitation enables viewing out-of-scope device details and creating components on unauthorized devices or VMs by submitting arbitrary IDs or using filters.
A Zip Slip vulnerability exists in the /upload endpoint of codeskyblue gohttpserver versions through 1.3.0. This flaw allows attackers to write arbitrary files on the server by uploading a specially crafted Zip archive.
An out-of-bounds read vulnerability exists in wlroots versions before 0.20.2 in the read_surface_class() function within xwayland/xwm.c. This flaw allows local X11 clients to leak compositor heap memory by setting a WM_CLASS property with a NUL-terminated instance but an unterminated class, causing an over-read of heap bytes exposed as the window class or app_id over IPC.
TeXlyre versions from 0.11.0 up to but not including 0.13.5 contain a stored cross-site scripting (XSS) vulnerability. This flaw allows attackers to execute malicious scripts by supplying crafted LSP or typesetter recipe icons containing HTML event handlers. Successful exploitation can lead to persistent script execution, potentially exposing local projects and repository credentials to attackers.
A vulnerability in the GStreamer JPEG 2000 decimator (gst-plugins-bad) can cause integer overflows or division by zero when processing crafted JPEG 2000 media. This can lead to application crashes and denial of service. The flaw requires processing attacker-controlled media through the jp2kdecimator element. No confidentiality or integrity impacts have been demonstrated. Some Linux distributions have versions with the fix, while others are still tracking exposure.
MongoDB Database Tools mongorestore has a vulnerability where it incorrectly URL-decodes an original collection name from metadata if the dump filename is truncated. This can allow a database user with the ability to create and populate a specially encoded collection to cause a restore operation to write documents into a different collection that the user cannot directly modify. This may lead to omission of backed-up documents or unintended replacement of collections when using the --drop option. The issue affects versions from 100.0.2 up to but not including 100.20.1.
SolarWinds Dameware contains a command injection vulnerability (CVE-2026-28336) that requires authentication and could allow an attacker to compromise a remotely controlled host. The vulnerability has a critical CVSS score of 9.9, indicating high impact on confidentiality, integrity, and availability.
A vulnerability exists in phpMyAdmin SQL-Parser versions 6.0.0 and 6.0.1 in the parse function of src/Statements/ExplainStatement.php. The flaw involves incorrect type conversion due to manipulation of the nextToken argument. This vulnerability can be exploited remotely and public exploit code is available. The vendor has not responded to the disclosure. The vulnerability has a CVSS score of 5.3, indicating medium severity, and impacts availability but not confidentiality or integrity.
Lightdash versions from 0.2609.0 up to but not including 3.137.0 have an authorization bypass vulnerability in the RenameService. This flaw allows authenticated users with update permission on one project to access and modify dashboards of other projects due to improper verification of project identifiers. Attackers can manipulate dashboard filters or read field metadata from unauthorized projects.
A stored cross-site scripting (XSS) vulnerability exists in Barn2 Plugins Posts Table with Search & Sort up to version 1.4.14. This flaw allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts that execute in users' browsers. The vulnerability has a CVSS score of 6.5, indicating a medium severity level.
A missing authorization vulnerability exists in Uncanny Owl Uncanny Automator up to version 7.7.1. This flaw allows exploitation of incorrectly configured access control security levels, potentially enabling unauthorized actions that impact the integrity of the system. The vulnerability has a medium severity rating with a CVSS score of 5.3.
A vulnerability in im3x Scriptables through the v2-dev branch allows attackers to inject arbitrary operating system commands by uploading a file with a specially crafted filename to the /sync endpoint. This could enable unauthorized command execution on the affected system.
SolarWinds Dameware contains a buffer overflow vulnerability (CVE-2026-28335) that can lead to remote code execution. Exploitation requires authentication. The vulnerability has a high severity score of 8.4 and impacts confidentiality, integrity, and availability.
MongoDB Database Tools mongorestore versions 100.4.0 through before 100.20.1 inconsistently handle the system.buckets. prefix when validating collection names in untrusted dumps. This flaw allows a specially crafted collection name to bypass special-collection guards and namespace filters, potentially enabling the creation of unauthorized user accounts, including those with root privileges, during a restore operation. Exploitation requires operator action with sufficient user-management privileges and cannot be prevented by excluding the admin namespace alone.
SolarWinds Dameware is affected by a DLL hijacking vulnerability that occurs during installation. Exploitation requires local machine access with administrative privileges. The vulnerability can lead to complete compromise of confidentiality, integrity, and availability.
A vulnerability in phpMyAdmin ShapeFile up to version 4.0.1 affects the ShapeRecord::loadFromFile function in the SHP File Handler component. This flaw can cause an infinite loop when processing manipulated ShapeFile data. The vulnerability can be exploited remotely and requires user interaction. Public exploit details have been disclosed, but the vendor has not responded or provided a fix. The issue has a medium severity rating with a CVSS score of 4.3.
Solanum before commit 2ea1382 has a buffer overflow vulnerability in the ms_kill() function. This flaw allows malicious linked servers to send an overlong kill reason that exceeds the 512-byte buffer, causing memory corruption. Exploitation can crash the ircd or potentially lead to remote code execution.
Solanum software versions before commit 2ce64de have a heap-based buffer overflow vulnerability. This flaw allows a malicious linked server to corrupt memory by sending overly long channel names in JOIN or SJOIN messages. Exploitation can cause crashes or potentially remote code execution by triggering strcpy and sprintf overflows in specific functions.