CVE Notifier

CVE-2026-15815 CWE-59 8.8

CVE-2026-15815 CVE Record

Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when extracting plugin archives. A crafted plugin archive can chain relative symbolic link entries to escape the plugin installation directory, wri…

cve.org Grafana:Grafana · OSS · Grafana:Grafana 2 hari lalu

CVE-2026-93395 CWE-191 5.3

Integer Underflow → Heap Out-of-Bounds Read in `bson_new_from_buffer()

A missing lower-bound validation in the bson_new_from_buffer() function of libbson allows an integer underflow when processing BSON data with a zero-length prefix. The function reads a 32-bit document length from the inp…

cve.org MongoDB · Inc.:C · Driver 2 hari lalu

CVE-2026-54597 CWE-89 8.3

ITFlow: Authenticated Time-Based Blind SQL Injection in ITFlow via expires Parameter

ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated user with module_support write permission and access to a credential reco…

cve.org itflow-org:itflow 2 hari lalu

CVE-2026-54596 CWE-89 8.1

ITFlow: Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database Exfiltration

ITFlow provides an IT documentation, ticketing and accounting system for small managed service providers. Prior to version 26.07, an authenticated Technician or higher with access to at least one client invoice can injec…

cve.org itflow-org:itflow 2 hari lalu

CVE-2026-54907 CWE-1188 5.3

Caddy Proxy Manager: Registrations enabled by default allows creating users with "user" permission

Caddy Proxy Manager is a web interface for managing Caddy Server reverse proxies and certificates. Prior to 1.5.1, Caddy Proxy Manager enables email and password self-registration by default at /api/auth/sign-up/email, a…

cve.org fuomag9:caddy-proxy-manager 3 hari lalu

CVE-2026-93394 CWE-303 3.7

libmongoc SCRAM client nonce-validation bypass

A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An…

cve.org MongoDB · Inc.:C · Driver 3 hari lalu

CVE-2026-54604 CWE-758 N/A

OpenSlide: openslide_read_region() returns uninitialized memory with libtiff 4.7.1

OpenSlide is a C library for reading whole slide image files. Prior to 4.0.1, a behavior change in libtiff 4.7.1 causes the indirect TIFF tile path in src/openslide-decode-tiff.c and _openslide_tiff_read_tile() to reques…

cve.org openslide:openslide 3 hari lalu

CVE-2026-86049 CWE-532 7.1

Jupyter Server: 5xx request logging leaks token-bearing Referer header values

Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyter_server/log.py copies the Referer header into a JSON header block without applying the token scr…

cve.org jupyter-server:jupyter_server 3 hari lalu

CVE-2026-93393 CWE-787 8.1

Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream

A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontr…

cve.org MongoDB · Inc.:C · Driver 3 hari lalu

CVE-2026-48977 CWE-123 N/A

OpenSlide: Arbitrary memory write with crafted Ventana BIF file

OpenSlide is a C library for reading whole slide image files. From 3.4.1 until 4.0.1, OpenSlide's parse_level0_xml() processing in src/openslide-vendor-ventana.c accepts nonpositive row or column tile counts from a craft…

cve.org openslide:openslide 3 hari lalu

CVE-2026-54355 CWE-79 N/A

MapServer: Reflected XSS in OpenLayers HTML Output via `HTTP_X_FORWARDED_HOST`

MapServer is a system for developing web-based GIS applications. From 6.0 until 8.6.4, MapServer's OpenLayers HTML output for SERVICE=WMS&REQUEST=GetMap&FORMAT=application/openlayers reflects an attacker-controlled X-For…

cve.org MapServer:MapServer 3 hari lalu

CVE-2026-68523 CWE-400 7.5

Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service

`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page heigh…

cve.org fulgur-rs:fulgur 3 hari lalu