Skip to content
OpenAdvisories

Vendor

jarun

6 known vulnerabilities.

Products

nnn 4 buku 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-123201

    buku through 5.1.1 SSRF via bukuserver fetch_data and network_handle API

    Buku (bukuserver) through 5.1.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server request internal hosts by supplying a url parameter to /api/fetch_data or /api/network_handle. Attackers can …

    jarun buku
  • Medium 6.1
    CVE-2026-121627

    buku 5.0 through 5.1.1 Stored XSS via bukuserver Bookmark List URL

    buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that allows attackers to execute script via an unescaped bookmark URL in BookmarkModelView._list_entry(). Attackers can submit a URL containing a doubl…

    jarun buku buku Ubuntu
  • Medium 4.4
    CVE-2026-121549

    nnn through 5.3 Insecure Temporary File Symlink Overwrite via pdfread and nuke Plugins

    nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by exploiting predictable paths in /tmp. Attackers can pre-create a symlink at the name-derived or PID-derived pat…

    jarun nnn nnn nnn Debian Ubuntu