CVE Notifier

CVE-2026-61550 CWE-862 9.8

Icinga 2: Improper access control for JSON-RPC update certificate messages

Icinga 2 is an open source monitoring system. From 2.8 until 2.14.9, 2.15.4, and 2.16.2, certificate update JSON-RPC message handling does not validate that the sender is a trusted endpoint. An unauthenticated network at…

cve.org Icinga:icinga2 1 hari lalu

CVE-2026-93761 CWE-1333 7.5

Denial of service via unbounded regex matching in Mongoid's in-memory query matcher

An inefficient regular expression complexity issue in the in-memory query evaluation component of the Mongoid library may allow an unauthenticated party to cause excessive processing within an embedding application proce…

cve.org MongoDB · Inc.:Mongoid 1 hari lalu

CVE-2026-91127 CWE-79 8.2

File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer

File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web applications. Prior to @file-viewer/doc 2.3.1 and msdoc-viewer 0.2.2, the legacy DOC renderer emitted docu…

cve.org flyfish-dev:file-viewer · @file-viewer:doc · flyfish-dev:msdoc-viewer 1 hari lalu

CVE-2026-77386 CWE-601 6.5

Kyoo: OIDC login token can be redirected to an attacker-controlled URL

Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, an unauthenticated attacker could initiate the OIDC login flow with an attacker-controlled redirectUrl. The login handling in auth/…

cve.org zoriya:Kyoo 1 hari lalu

CVE-2026-77385 CWE-639 4.3

Kyoo: Transcoder serves uncataloged files from the media directory

Kyoo is a self-hosted media server focused on movies, series, and anime. Prior to 5.1.0, a registered user with the core.play permission could supply a base64-encoded filesystem path to the transcoder. The path handling …

cve.org zoriya:Kyoo 1 hari lalu

CVE-2026-93762 CWE-470 9.8

Data deletion and attribute disclosure via field-name method injection in in-memory queries

Mongoid contains an unsafe reflection weakness in the query path used for embedded documents. An application that passes an externally supplied field name to certain in-memory query methods may allow an unauthenticated p…

cve.org MongoDB · Inc.:Mongoid 1 hari lalu

CVE-2026-33625 CWE-400 8.8

LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading

LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions 012.1 through 0.12.2 contain a code injection vulnerability in `lmdeploy/pytorch/config.py` line 620 that allows an attacker t…

cve.org InternLM:lmdeploy 1 hari lalu

CVE-2026-62278 CWE-22 8.1

LubeLogger: Path Traversal in HandleTranslationFileUpload Allows Authenticated Users to Write Files Outside Data Directory

LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, authenticated non-administrative users could reach HandleTranslationFileUpload and influence the name pass…

cve.org hargata:lubelog 1 hari lalu

CVE-2026-62279 CWE-639 7.1

LubeLogger: IDOR in DuplicateRecordsToOtherVehicles Allows Copying Records from Any User's Vehicle Without Ownership Check

LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker. Prior to 1.6.8, an authenticated user could submit caller-controlled recordIds to the DuplicateRecordsToOtherVehicles endp…

cve.org hargata:lubelog 1 hari lalu

CVE-2026-93763 CWE-312 6.5

Silent plaintext persistence via unresolved callable database name in encryption schema map

A protection mechanism failure in the object-document mapper's encryption configuration generation can cause fields that an application declared for client-side field-level encryption to be written and kept in cleartext,…

cve.org MongoDB · Inc.:Mongoid 1 hari lalu

CVE-2026-84992 CWE-79 6.1

md-editor-v3: XSS via fenced-code language rendering bypass

md-editor-v3 is a Markdown editor for Vue 3 developed in JSX and TypeScript. Prior to 6.5.4, MdPreview's useMarkdownIt() highlight callback in packages/MdEditor/layouts/Content/composition/useMarkdownIt.ts inserts a fenc…

cve.org imzbf:md-editor-v3 1 hari lalu

CVE-2026-84975 CWE-295 7.4

PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends)

PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in pjlib/src/pj/ssl_sock_ossl.c and pjlib/src/pj/ssl_sock_gtls.c copy DNS SubjectAltName…

cve.org pjsip:pjproject 1 hari lalu