Archive
13 November 2026
Vulnerabilities first published on this day (UTC), newest first.
39 results · Clear filters · Feed
-
Low 2.3
Laravel is a web application framework. Prior to 12.71.0 and 13.40.0, Laravel's Concurrency::run process driver can tre…
-
Low 2.3
Apache APISIX: identity spoofing in openapi-to-mcp
Authentication bypass by spoofing vulnerability in Apache APISIX. When a Route's configured headers carry a caller identity and the OpenAPI document declares the same header, a caller can act as another identity against the upstream API. This issue affects Ap…
-
Low 3.1
Nuxt is an open-source web development framework for Vue.js. From 3.21.6 to before 4.0.0 and from 4.4.6 until 4.6.4, th…
-
Low 3.1
Nuxt is an open-source web development framework for Vue.js. From @nuxt/webpack-builder 3.0.0 and @nuxt/rspack-builder …
-
Low 2.3
MRBS before 1.13.0 contains an LDAP injection vulnerability in web/lib/MRBS/Auth/AuthLdap.php that interpolates unescap…
-
Low 2.3
In gittuf 0.4.0 through 0.16.0, when a policy update appears within the range of reference state log entries being veri…
-
Low 2.3
@utcp/http before 1.1.14 contains a server-side request forgery vulnerability that allows remote manuals to reach loopb…
-
Low 3.8
Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability. A high-privileged attacker could exploit t…
-
Low 2.3
P-Net before 1.0.4 sets the alarm receiver state to waiting for confirmation before the data of a received alarm notifi…
-
Low 2.3
P-Net before 1.0.4 does not check the record data length of an IODWrite request to a non-user record index against the …
-
Low 2.1
This vulnerability exists in the eMudhra emBridge due to missing authorization checks in the FileBrowser API endpoints.…
-
Low 2.3
Zipline before 4.2.1 contains a missing authorization vulnerability in the /api/user/files/transaction endpoint that al…
-
Low 2.3
NocoDB from 2026.05.2 before 2026.07.0 contains a server-side request forgery vulnerability that allows Editor-role use…
-
Low 3.3
NLTK 3.9.4 before 3.10.4 Symlink Sandbox Escape via chat80.sql_query
NLTK from 3.9.4 before 3.10.4 contains a symlink following vulnerability in nltk.sem.chat80.sql_query() that bypasses the pathsec data-root sandbox containment check. Attackers who can write into a trusted NLTK data root can plant a symbolic link to read SQLi…
-
Low 1.1
An integer overflow vulnerability in the Qt QTextCodec fromUnicode() and toUnicode() functionality of the Qt 5 Core Com…
-
Low 2.1
Frappe HRMS from 16.0.0 before 16.20.1 contains an information exposure vulnerability that places the subscription key …
-
Low 2.3
Parse Server from 9.10.6-alpha.1 before 9.10.8-alpha.1 contains an information disclosure vulnerability that allows cli…
-
Low 1.8
Wasmtime 47.0.0 before 48.0.8, 49.0.0 before 49.0.5, and 50.0.0 before 50.0.1 contains a cross-engine type confusion vu…
-
Low 1.0
Wasmtime 47.0.0 before 48.0.8, 49.0.0 before 49.0.5, and 50.0.0 before 50.0.1 contains an insufficient type-check in th…
-
Low 2.7
WP STAGING <= 4.19.0 - Authenticated (Administrator+) Arbitrary Directory Deletion via 'deleteDir' Parameter
The WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups plugin for WordPress is vulnerable to Arbitrary Directory Deletion in all versions up to, and including, 4.19.0. This is due to insufficient path validation in the…
-
Low 2.3
OpenEMR before 8.5.0 contains active debug code in interface/fax/fax_view.php that executes passthru("groups") and disc…
-
Low 2.3
Glance from 0.7.9 before 0.8.8 contains a stored cross-site scripting vulnerability that allows malicious extension end…
-
Low 2.3
Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to revoke other users…
-
Low 2.3
OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting vulnera…
-
Low 2.3
OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a cross-site request forgery vulnerab…
-
Low 3.7
OpenMage magento-lts before 20.19.0 Race Condition in Coupon Usage Limits
OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a race condition in shopping cart price rule usage limits, because Mage_SalesRule_Model_Validator checks coupon limits without locking and the usage counters are later increment…
-
Low 3.5
OpenMage magento-lts before 20.18.2 Stored XSS via Product Name in MSRP Popup
OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting vulnerability because storefront MSRP/MAP popup and Qty Increments notice templates output product names without proper escaping. Attackers with ad…
-
Low 2.3
OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a reflected cross-site scripting vuln…
-
Low 2.3
Miniflux before 2.3.5 contains an insufficient session expiration vulnerability that allows attackers to retain account…
-
Low 3.7
Contao before 5.3.54, 5.7.17, and 6.0.6 Session Invalidation Failure on 2FA Change
Contao 4.6.0 before 5.3.54, 5.4.0-RC1 before 5.7.17, and 6.0.0-RC1 before 6.0.6 fails to invalidate existing user sessions when two-factor authentication is enabled or disabled. Because Contao\User::isEqualTo() and serialized session data omit two-factor stat…
-
Low 2.1
Edito CMS sends JWT token via GET requests. This allows a local attacker with access to browser history to obtain valid…
-
Low 2.3
A deserialization type-restriction control in the BSON serialization component can be bypassed because the check used t…
-
Low 2.9
bootutil_img_hash() computes the image digest over ih_hdr_size + ih_img_size + ih_protect_tlv_size bytes, all three tak…
-
Low 2.0
The MCUboot TLV iterator bootutil_tlv_iter_next() in boot/bootutil/src/tlv.c walks image trailer TLVs with a single loo…
-
Low 2.9
split_image_check() in boot/bootutil/src/loader.c declares a fixed uint8_t loader_hash[32] buffer and passes it as the …
-
Low 2.4
boot_save_boot_status() in boot/bootutil/src/boot_record.c reads the image's EXPECTED_HASH_TLV into a stack buffer imag…
-
Low 2.0
When MCUboot is built with the TinyCrypt crypto backend (MCUBOOT_USE_TINYCRYPT), bootutil_aes_ctr_drop() in boot/bootut…
-
Low 2.0
In MCUboot's serial-recovery encrypted-image support (boot/boot_serial/src/boot_serial_encryption.c), decrypt_image_inp…
-
Low 3.7
Linksys EA8100 Web UI cookie httponly flag
A vulnerability was identified in Linksys EA8100 1.0.3.216940. Impacted is an unknown function of the component Web UI. Such manipulation leads to cookie without 'httponly' flag. It is possible to launch the attack remotely. This attack is characterized by hi…