A path traversal vulnerability exists in the simulation of actions in the Zypp backend of PackageKit versions before 1.4.1. This flaw allows local attackers to escalate privileges to root. The vulnerability is critical with a CVSS 4.0 score of 9.3, indicating high impact and exploitability under local attack conditions.
The loadIndex function in nmslib hnswlib and Spotify Voyager improperly validates the element count in a serialized HNSW index. This flaw allows an attacker to supply a crafted index file with an element count exceeding the stored capacity, leading to a heap buffer overflow and potential application crash during file loading.
A vulnerability exists in the ssl.get_server_certificate() function when the ca_certs parameter is supplied. In this case, the identity of the certificate is not checked, potentially undermining the trust model of SSL certificate validation.
A path traversal vulnerability exists in kevquirk PureBlog up to version 3.7.2 in the save_page function of includes/lib/content.php within the Page Editor component. This flaw allows remote attackers with high privileges to manipulate the page slug argument to perform path traversal. The issue is fixed in version 3.7.3.
PrestaShop has an authenticated PHP code injection vulnerability in its back-office Performance debug-mode configuration. A user with permission to modify debug settings can inject PHP code via crafted debug cookie parameters, which are written without proper escaping into a PHP configuration file. This injected code executes with web-server privileges when the configuration file is loaded.
CVE-2026-124850 is a SQL injection vulnerability in a database migration script of flowintel versions prior to 4.0.0. The migration process interpolates stored connector identifier values directly into SQL statements without parameterization, allowing an attacker with prior write access to the database to execute arbitrary SQL during an upgrade. This can lead to unauthorized data disclosure, modification, or deletion.
The http.cookiejar.CookieJar component improperly deleted stored cookies when receiving a response with an already expired Set-Cookie header. This deletion occurred without consulting the cookie policy, allowing a server to potentially delete cookies from other domains within a shared cookie jar, such as urllib's HTTPCookieProcessor. The issue was fixed by ensuring the cookie policy is checked before allowing an expired cookie to delete an existing one, in compliance with RFC 6265 section 5.3.
CVE-2026-16283 is an OS command injection vulnerability in Osbil Technology Ltd.'s oPanel software versions before 1.20.66. This flaw allows an attacker with low privileges to execute arbitrary operating system commands without user interaction, potentially leading to full confidentiality, integrity, and availability compromise of the affected system.
A vulnerability in kevquirk PureBlog up to version 3.7.2 allows unrestricted image upload via the admin/upload-image.php endpoint. This flaw can be exploited remotely and affects an unknown function related to image upload in the admin component. The issue is fixed in version 3.7.3.
A SQL injection vulnerability exists in PipraPay version 3.0.0 within the Admin Panel component's deleteData function. This vulnerability allows remote attackers to manipulate the selected_ids/ItemID argument to execute SQL injection attacks. The vulnerability has been publicly disclosed, and exploit code is available. The project has been notified but has not yet issued a response or patch. The CVSS score is 6.3, indicating a medium severity risk.
CVE-2026-119474 is a vulnerability in HAVELSAN Inc.'s Liman Render Engine before version 1.2-81. It involves incorrect permission assignment for a critical resource, which can lead to privilege escalation. The vulnerability has a high severity with a CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability. No patch or remediation information is currently provided.
A privilege escalation vulnerability was identified in Firefox for iOS and assigned CVE-2026-121843. This flaw allows an attacker to gain elevated privileges within the Firefox for iOS application. The issue was addressed and fixed in Firefox for iOS version 160.0. The vulnerability has a high severity rating with a CVSS score of 8.8.
A remote code execution vulnerability has been identified in HPE Morpheus Software. This vulnerability allows an attacker with low privileges to execute arbitrary code remotely without user interaction. The flaw is rated with a high severity score of 8.8, indicating significant potential impact on confidentiality, integrity, and availability.
A vulnerability in HPE Morpheus manager software exposes confidential certificate information. This exposure can lead to a high-impact compromise affecting confidentiality, integrity, and availability of the system.
A vulnerability in PipraPay 3.0.0 affects the hash_hmac function in the pp-token anti-CSRF handler component. This weakness allows remote attackers to manipulate the function, potentially leading to the exposure of hard-coded credentials. The vulnerability has a medium severity score and public exploit code is available. The project has been notified but has not yet issued a response or fix.
CVE-2026-121841 is a moderate impact vulnerability in Firefox for iOS described as 'Other issue'. It was fixed in Firefox for iOS version 160.0. No detailed technical information or CVSS score is provided.
A vulnerability exists in GStreamer's MXF demuxer plugin (gst-plugins-bad) where it improperly indexes internal tables using unvalidated values from specially crafted MXF media files. This can cause a denial of service (application crash) and may allow limited reading of adjacent heap memory. Exploitation requires a local attacker to trick a user into opening a malicious MXF file. No code execution or write primitives have been demonstrated. Red Hat Enterprise Linux versions 9.4 and later, Red Hat Enterprise Linux 10, Red Hat In-Vehicle Operating System, and current Fedora streams with GStreamer versions 1.22.x through 1.28.8 are affected. Earlier Red Hat versions and RHEL 9.2 with GStreamer 1.18.4 are not affected. Mitigation involves avoiding untrusted MXF files or disabling the mxfdemux plugin until a fixed package is available.
C-Prot AppDefense before version 1.0.2729 contains a vulnerability involving improperly controlled modification of dynamically-determined object attributes, which can lead to privilege escalation. The vulnerability is identified as CVE-2026-95648 and has a high severity score of 8.1. It allows an attacker with some privileges to escalate their privileges further without user interaction. No public exploits or known active exploitation have been reported. No patch or remediation details are provided in the available data.
Infoblox NIOS versions up to 9.1.0 have a vulnerability due to improper input validation that allows stored cross-site scripting (XSS). This vulnerability can lead to limited confidentiality and integrity impacts but does not affect availability. The flaw requires high privileges and user interaction to exploit and affects the confidentiality and integrity of the system in a scope-changing manner.
A reflected Cross-site Scripting (XSS) vulnerability exists in the Invoice Gateway for WooCommerce – Invoice Payment Gateway plugin, affecting versions up to 1.1.6. This vulnerability allows improper neutralization of input during web page generation, potentially enabling an attacker to execute arbitrary scripts in a user's browser. The vulnerability has a high severity rating with a CVSS score of 7.1.