Archive
8 September 2026
Vulnerabilities first published on this day (UTC), newest first.
1,568 results · Feed
-
High 7.5
Skype for Business Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.
-
Medium 6.3
itsourcecode Sales and Inventory System us_edit.php sql injection
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/us_edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is public…
-
High 8.8
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability that allows attackers to execute denied shell commands by exploiting a word-boundary mismatch in comment handling between the approval gate's shell parser and bash. Attackers can craft a co…
-
High 8.8
Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator
Roo-Code through 3.54.0 contains an auto-approve bypass vulnerability in the shell command parsing logic that allows attackers to execute denied shell commands by exploiting the omission of the bash pipe operator from the command parser's operator token set. …
-
Medium 6.3
ningzichun Student Management System login.php session_start session fixiation
A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is the function session_start of the file login.php. The manipulation results in session fixiation. The attack can…
-
High 8.6
Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously craf…
-
Critical 9.3
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the pag…
-
Critical 9.3
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the pag…
-
High 8.6
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user i…
-
High 7.5
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user …
-
High 7.6
Adobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to access unauthor…
-
High 8.2
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive information. Exploitation of this issue does not require user …
-
High 8.6
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does…
-
High 8.7
Adobe Commerce | Incorrect Authorization (CWE-863)
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a…
-
High 7.8
In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This c…
-
High 7.8
In multiple functions of SmsController.java, there is a possible escalation of privilege due to a missing permission ch…
-
High 7.0
In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This coul…
-
High 7.8
In kvm_iommu_map_sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead t…
-
High 7.8
In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead t…
-
High 7.8
In stpropnci_process_std of stpropnci_std.cc, there is a possible memory safety issue due to a missing bounds check. Th…
-
Critical 9.8
In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead t…
-
High 7.8
In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escala…
-
High 7.8
In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds write due to a heap buffer overflow. Th…
-
Low 3.3
In setTo of ResourceTypes.cpp, there is a possible out-of-bounds heap read due to a missing bounds check. This could le…
-
High 7.8
In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This co…
-
High 8.0
In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds c…
-
High 7.8
In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation…
-
Medium 6.5
In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validatio…
-
High 7.8
In parseParts of PduParser.java, there is a possible out of bounds read due to a heap buffer overflow. This could lead …
-
High 7.8
In multiple locations, there is a possible out of bounds write due to an integer overflow. This could lead to local esc…
-
Critical 9.8
In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote…
-
High 7.8
In tt_face_colr_blend_layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This cou…
-
High 7.8
In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local esc…
-
Low 3.5
In get_eht_operation_channel_width of ieee802_11_common.c, there is a possible out of bounds read due to an incorrect b…
-
High 7.8
In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a…
-
High 7.8
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to an incorrect bounds check. This c…
-
High 8.8
In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This coul…
-
High 7.8CVE-2026-49881 Public exploit
In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in th…
-
High 8.8
In multiple functions of rw_t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead…
-
High 7.8
In read_boot_region of fsck.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to…