CVE Notifier

CVE-2026-54354 CWE-89 8.2

MapServer: PostGIS Numeric Filter Value SQL Injection in MapServer Runtime Query Translation

MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS runtime filter translation in src/mappostgis.cpp and msPostGISLayerTranslateFilter() treats a filteritem as numeric whe…

cve.org MapServer:MapServer 3 hari lalu

CVE-2026-76154 CWE-79 7.3

CVE-2026-76154 CVE Record

A stored cross-site scripting vulnerability in the Geomap panel's MapLibre base layer allows a user with the Editor role to execute arbitrary JavaScript in another user's session by hosting a malicious style configuratio…

cve.org Grafana:Grafana · OSS · Grafana:Grafana 3 hari lalu

CVE-2026-54339 CWE-918 7.7

Glean: Server-Side Request Forgery (SSRF) with Full Response Disclosure via Malicious RSS Feed in /api/feeds/discover

Glean is a self-hosted RSS reader and personal knowledge management tool. Prior to 0.2.6, POST /api/feeds/discover passes an attacker-supplied feed_url to discover_feed(feed_url), creates a subscription through FeedServi…

cve.org LeslieLeung:glean 3 hari lalu

CVE-2026-67071 CWE-212 6.5

HCL DevOps Deploy / HCL Launch is susceptible to an Improper Removal of Sensitive Information Before Storage or Transfer

HCL DevOps Deploy / HCL Launch is susceptible to an information disclosure vulnerability when processing redacted property values. If a deployment is configured with a secure property that starts with certain non-ASCII c…

cve.org HCLSoftware:HCL · DevOps · Deploy 3 hari lalu

CVE-2026-54510 CWE-287 7.1

Speakr: CSRF bypass via unauthenticated API token parameter in csrf_exempt_for_api_tokens hook

Speakr is a personal, self-hosted web application designed for transcribing audio recordings. Prior to 0.8.21-alpha, the csrf_exempt_for_api_tokens() before_request hook in src/app.py calls csrf.exempt(view_func), perman…

cve.org murtaza-nasir:speakr 3 hari lalu

CVE-2026-54565 CWE-200 4.7

rhwp browser extension performs SSRF / private-network requests and leaks HWP preview data to untrusted pages

rhwp is an HWP viewer and editor implemented in Rust and WebAssembly. Prior to rhwp 0.7.15 and rhwp Chrome and Firefox extension 0.2.4, the browser extensions use an all-URLs host permission to detect HWP and HWPX links …

cve.org edwardkim:rhwp 3 hari lalu

CVE-2026-68537 CWE-400 7.5

Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service

`fulgur` converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page heigh…

cve.org fulgur-rs:fulgur 3 hari lalu

CVE-2026-54521 CWE-79 6.1

FairEmail: Cross-site scripting (XSS) in AMP message rendering (ActivityAMP)

FairEmail is a fully featured, open source, privacy-friendly email app for Android. Prior to 1.2319, the ActivityAMP AMP message renderer in app/src/main/java/eu/faircode/email/ActivityAMP.java enables JavaScript in its …

cve.org M66B:FairEmail 3 hari lalu

CVE-2026-50277 CWE-770 7.5

dd-trace-cpp: Improper parsing of W3C baggage headers may lead to DoS

dd-trace-cpp is the Datadog distributed tracing library for C++. Prior to 2.1.0, dd-trace-cpp parses incoming W3C baggage headers without enforcing DD_TRACE_BAGGAGE_MAX_ITEMS or DD_TRACE_BAGGAGE_MAX_BYTES on the extracti…

cve.org DataDog:dd-trace-cpp 3 hari lalu

CVE-2026-54501 CWE-20 N/A

Browsertrix: Arbitrary Command Injection due to Improper Command Sanitization in Git URLs specified as Custom Behaviors

Browsertrix is a high-fidelity, browser-based crawling service for web archiving that can be self-hosted or used through Webrecorder's hosted instance. From 1.15.0 until 1.22.8, Browsertrix improperly sanitizes Git URLs …

cve.org webrecorder:browsertrix 3 hari lalu

CVE-2026-54237 CWE-94 N/A

Wavelog: Unauthenticated Remote Code Execution

Wavelog is web-based amateur radio logging software. From 1.8 until 2.4.2, Wavelog exposes /install/ajax.php and /install/includes/interface_assets/triggers.php after installation without an installation lock or permissi…

cve.org wavelog:wavelog 3 hari lalu

CVE-2026-45140 CWE-22 9.8

Chamilo LMS CStudio upload flow allows unauthenticated remote code execution

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The authoritative advisory does not identify the af…

cve.org chamilo:chamilo-lms 3 hari lalu