Tue, Nov 19 · 06:15 PM CSTCVE-2024-42450
10.0/10 · Must read/watchNVDvuln
Summary
The Versa Director uses PostgreSQL (Postgres) to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director configures Postgres to listen on all netwo
CVECVE-2024-42450
SeverityCRITICAL
TypeUPDATED
PublishedTue, Nov 19 · 06:15 PM CST
ModifiedThu, Sep 03 · 06:22 PM CDT
CVE-2026-49869
10.0/10 · Must read/watchNVDvuln
Summary
Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs") to whitelist the public configuration endpoint from Basic Auth. Because the check is a suffix match rather than an exact path match, any API path whos
CVECVE-2026-49869
SeverityCRITICAL
TypeUPDATED
PublishedFri, Jun 26 · 10:16 PM CDT
ModifiedThu, Sep 03 · 01:05 PM CDT
CVE-2026-15630
9.9/10 · Must read/watchNVDvuln
Summary
A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch between authorization (based on ?id=) and action (based on request body).
CVECVE-2026-15630
SeverityCRITICAL
TypeUPDATED
PublishedThu, Jul 23 · 09:17 PM CDT
ModifiedThu, Sep 03 · 07:17 PM CDT
CVE-2026-53006
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is problematic since skb->head can change. Remove these temporary variables: - We only access &ipv6_hdr(skb)->saddr and &ipv6_hdr(skb)->daddr when net_dbg_ratelimited() i
CVECVE-2026-53006
SeverityCRITICAL
TypeUPDATED
PublishedWed, Jun 24 · 05:17 PM CDT
ModifiedThu, Sep 03 · 01:05 PM CDT
CVE-2026-64066
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_read_to_pagecache() to pause on subreq failure Fix netfs_read_to_pagecache() so that it pauses the generation of new subrequests if an already-issued subrequest fails.
CVECVE-2026-64066
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 04:17 PM CDT
ModifiedThu, Sep 03 · 03:35 PM CDT
CVE-2026-64067
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing barriers when accessing stream->subrequests locklessly The list of subrequests attached to stream->subrequests is accessed without locks by netfs_collect_read_results() and netfs_collect_write_results(), and then they access subreq->
CVECVE-2026-64067
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 04:17 PM CDT
ModifiedThu, Sep 03 · 03:34 PM CDT
CVE-2026-64068
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfs_retry_read_subrequests() and netfs_retry_write_stream() to take the appropriate lock when adding extra subrequests into stream->subrequests.
CVECVE-2026-64068
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 04:17 PM CDT
ModifiedThu, Sep 03 · 03:34 PM CDT
CVE-2026-64069
9.8/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix cancellation of a DIO and single read subrequests When the preparation of a new subrequest for a read fails, if the subrequest has already been added to the stream->subrequests list, it can't simply be put and abandoned as the collector may
CVECVE-2026-64069
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 04:17 PM CDT
ModifiedThu, Sep 03 · 03:33 PM CDT
CVE-2026-9586
9.8/10 · Must read/watchNVDvuln
Summary
An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning with and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. An unauthenticated remote attacker can
CVECVE-2026-9586
SeverityCRITICAL
TypeUPDATED
PublishedFri, Jul 17 · 05:17 PM CDT
ModifiedThu, Sep 03 · 01:06 PM CDT
CVE-2026-9698
9.8/10 · Must read/watchNVDvuln
Summary
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a buffer overflow.
CVECVE-2026-9698
SeverityCRITICAL
TypeUPDATED
PublishedTue, Jun 09 · 08:16 AM CDT
ModifiedThu, Sep 03 · 01:06 PM CDT
CVE-2026-43114
9.4/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry New test case fails unexpectedly when avx2 matching functions are used. The test first loads a ranomly generated pipapo set with 'ipv4 . port' key, i.e. nft -f foo. This works. T
CVECVE-2026-43114
SeverityCRITICAL
TypeUPDATED
PublishedWed, May 06 · 10:16 AM CDT
ModifiedThu, Sep 03 · 01:05 PM CDT
CVE-2026-64080
9.3/10 · Must read/watchNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Snapshot notifier callbacks under lock Both notification handlers currently look up a notifier callback under notify_lock, drop the lock, and then dereference the returned notifier entry. A concurrent unregister can delete and free t
CVECVE-2026-64080
SeverityCRITICAL
TypeUPDATED
PublishedSun, Jul 19 · 04:17 PM CDT
ModifiedThu, Sep 03 · 01:08 PM CDT
CVE-2026-33186
9.1/10 · Must read/watchNVDvuln
Summary
gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g.,
CVECVE-2026-33186
SeverityCRITICAL
TypeUPDATED
PublishedFri, Mar 20 · 11:16 PM CDT
ModifiedThu, Sep 03 · 01:05 PM CDT
CVE-2026-39830
9.1/10 · Must read/watchNVDvuln
Summary
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.
CVECVE-2026-39830
SeverityCRITICAL
TypeUPDATED
PublishedFri, May 22 · 04:16 AM CDT
ModifiedThu, Sep 03 · 01:05 PM CDT
CVE-2026-4408
9.0/10 · Must read/watchNVDvuln
Summary
A flaw was found in Samba. A remote attacker can exploit a misconfiguration in Samba file servers and classic domain controllers that use the "check password script" feature. If this script is configured with the %u substitution character, the client-controlled username is passed without proper escaping of shell meta-c
CVECVE-2026-4408
SeverityCRITICAL
TypeUPDATED
PublishedThu, May 28 · 09:16 AM CDT
ModifiedThu, Sep 03 · 03:17 PM CDT
CVE-2025-5459
8.8/10 · Worth your timeNVDvuln
Summary
A user with specific node group editing permissions and a specially crafted class parameter could be used to execute commands as root on the primary host. It affects Puppet Enterprise versions 2018.1.8 through 2023.8.3 and 2025.3 and has been resolved in versions 2023.8.4 and 2025.4.0.
CVECVE-2025-5459
SeverityHIGH
TypeUPDATED
PublishedThu, Jun 26 · 07:15 AM CDT
ModifiedFri, Sep 04 · 02:17 AM CDT
CVE-2026-14474
8.8/10 · Worth your timeNVDvuln
Summary
A flaw was found in SSSD's LDAP sudo provider. When the ldap_sudo_search_base option is not explicitly configured, SSSD searches the entire LDAP directory tree for sudoRole objects. An authenticated attacker with write access to any subtree can inject a sudoRole object granting root-level sudo privileges on all SSSD-en
CVECVE-2026-14474
SeverityHIGH
TypeUPDATED
PublishedTue, Jul 07 · 10:16 AM CDT
ModifiedThu, Sep 03 · 03:17 PM CDT
CVE-2026-43112
8.8/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath When cifs_sanitize_prepath is called with an empty string or a string containing only delimiters (e.g., "/"), the current logic attempts to check *(cursor2 - 1) before cursor2 has advanced.
CVECVE-2026-43112
SeverityHIGH
TypeUPDATED
PublishedWed, May 06 · 10:16 AM CDT
ModifiedThu, Sep 03 · 01:05 PM CDT
CVE-2026-15724
8.7/10 · Worth your timeNVDvuln
Summary
In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.
CVECVE-2026-15724
SeverityHIGH
TypeUPDATED
PublishedTue, Jul 21 · 05:17 PM CDT
ModifiedThu, Sep 03 · 05:35 PM CDT
CVE-2026-44492
8.6/10 · Worth your timeNVDvuln
Summary
Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When NO_PROXY lists an IPv4 address such as 127.0.0.1 or 169.254.169.254, a request URL using the IPv4-mapped IPv6 form (::ffff:7f00:1, ::ffff:a9fe:a9fe) still routes throug
CVECVE-2026-44492
SeverityHIGH
TypeUPDATED
PublishedThu, Jun 11 · 05:16 PM CDT
ModifiedThu, Sep 03 · 01:05 PM CDT
CVE-2026-60193
8.5/10 · Worth your timeNVDvuln
Summary
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL
CVECVE-2026-60193
SeverityHIGH
TypeUPDATED
PublishedTue, Jul 21 · 10:17 PM CDT
ModifiedThu, Sep 03 · 06:26 PM CDT
CVE-2025-12107
8.4/10 · Worth your timeNVDvuln
Summary
The Velocity template engine, utilized by the affected product, accepts and processes template syntax without sufficient sanitization or validation of user-controlled input. This allows an authenticated administrator to inject arbitrary template syntax. Successful exploitation enables an attacker with administrative pr
CVECVE-2025-12107
SeverityHIGH
TypeUPDATED
PublishedThu, Feb 19 · 10:16 AM CST
ModifiedThu, Sep 03 · 02:17 PM CDT
CVE-2026-64081
8.4/10 · Worth your timeNVDvuln
Summary
In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Validate framework notification message layout Framework notifications carry an indirect message in the shared RX buffer. Validate the reported offset and size before using them, reject zero-length payloads, and ensure that any non-h
CVECVE-2026-64081
SeverityHIGH
TypeUPDATED
PublishedSun, Jul 19 · 04:17 PM CDT
ModifiedThu, Sep 03 · 01:06 PM CDT
CVE-2024-7837
8.2/10 · Worth your timeNVDvuln
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Firmanet Software ERP allows SQL Injection. This issue affects ERP: before 15.0.1.
CVECVE-2024-7837
SeverityHIGH
TypeUPDATED
PublishedFri, Nov 22 · 09:15 AM CST
ModifiedFri, Sep 04 · 09:17 AM CDT
CVE-2026-33810
8.2/10 · Worth your timeNVDvuln
Summary
When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in th
CVECVE-2026-33810
SeverityHIGH
TypeUPDATED
PublishedWed, Apr 08 · 02:16 AM CDT
ModifiedThu, Sep 03 · 01:05 PM CDT
