CVE Notifier

CVE-2026-68493 CWE-639 3.1

CVE-2026-68493

After guessing a 62^15 complex unique identifier, a malicious logged in user was able to retrieve a list of memberships for a circle they are not a member of.

cve.org Nextcloud:Server 2 hari lalu

CVE-2026-93456 CWE-352 8.2

django-page-cms through 2.0.13 CSRF via admin mutation views

django-page-cms through 2.0.13 exempts five admin mutation views from CSRF protection in pages/admin/views.py, allowing attackers to forge requests that modify page content. Signed-in editors visiting a malicious page ca…

cve.org batiste:django-page-cms 2 hari lalu

CVE-2026-93455 CWE-862 6.5

django-page-cms through 2.0.13 Unauthorized Content Access via Staff Account

django-page-cms through 2.0.13 fails to properly validate page permissions in admin helper views, allowing any staff account to read arbitrary page content and stored media paths. Attackers with low-privilege staff crede…

cve.org batiste:django-page-cms 2 hari lalu

CVE-2026-93313 CWE-190 6.3

Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow

A vulnerability was found in Freedesktop Poppler 26.07.0. The impacted element is the function JBIG2Stream::readCodeTableSeg of the file poppler/JBIG2Stream.cc. Performing a manipulation results in integer overflow. The …

cve.org Freedesktop:Poppler 2 hari lalu

CVE-2026-93312 CWE-476 4.3

Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference

A flaw has been found in Freedesktop Poppler 26.07.0. Impacted is the function JBIG2Stream::rewind of the file poppler/JBIG2Stream.cc. This manipulation causes null pointer dereference. It is possible to initiate the att…

cve.org Freedesktop:Poppler 2 hari lalu

CVE-2026-93311 CWE-190 4.3

Freedesktop Poppler SampledFunction Function.cc integer overflow

A vulnerability was detected in Freedesktop Poppler 26.07.0. This issue affects the function SampledFunction::SampledFunction of the file poppler/Function.cc of the component SampledFunction. The manipulation of the argu…

cve.org Freedesktop:Poppler 2 hari lalu

CVE-2026-79954 CWE-306 N/A

NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID

NASA CryptoLib 1.5.0 contains an authentication downgrade vulnerability in the Telecommand (TC) receive path. The receiver selects the Security Association used for SDLS processing solely from the SPI field inside the in…

cve.org NASA:CryptoLib 2 hari lalu

CVE-2026-93310 CWE-770 5.3

O-RAN-SC SMO OAM VES Collector allocation of resources

A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-10. This affects an unknown part of the component VES Collector. The manipulation leads to allocation of resources. Remote exploitation of the attack is possible…

cve.org O-RAN-SC:SMO · OAM 2 hari lalu

CVE-2026-88623 CWE-? N/A

CVE-2026-88623

NUUO Network Video Recorder 2.0.0 is vulnerable to arbitrary file read. In up.php, the url parameter submitted by the user via POST is received, and fopen() is used to open the URL in binary read-only mode. The content i…

MITRE n/a:n/a 2 hari lalu

CVE-2026-88622 CWE-? N/A

CVE-2026-88622

NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.

MITRE n/a:n/a 2 hari lalu

CVE-2026-79294 CWE-? N/A

CVE-2026-79294

Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the HTML artifact Preview rendering; public Share view component

MITRE n/a:n/a 2 hari lalu

CVE-2026-93309 CWE-770 4.3

O-RAN-SC SMO OAM VES Collector allocation of resources

A vulnerability was determined in O-RAN-SC SMO OAM 2025-06-10. Affected by this issue is some unknown functionality of the component VES Collector. Executing a manipulation can lead to allocation of resources. The attack…

cve.org O-RAN-SC:SMO · OAM 2 hari lalu