DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
GHSA-3GJW-F78C-VVPW: GHSA-3GJW-F78C-VVPW: Denial of Service via Unhandled Out-of-Bounds Indexing Panic in tokio-postgres
cverports profile

GHSA-3GJW-F78C-VVPW: GHSA-3GJW-F78C-VVPW: Denial of Service via Unhandled Out-of-Bounds Indexing Panic in tokio-postgres

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-14669: CVE-2026-14669: PostgreSQL to_char() Timezone Abbreviation Heap-Based Buffer Overflow
cverports profile

CVE-2026-14669: CVE-2026-14669: PostgreSQL to_char() Timezone Abbreviation Heap-Based Buffer Overflow

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63462: CVE-2026-63462: Unauthenticated Stack Overflow Denial of Service in Unleash Server
cverports profile

CVE-2026-63462: CVE-2026-63462: Unauthenticated Stack Overflow Denial of Service in Unleash Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63004: CVE-2026-63004: Server-Side Request Forgery in Unleash Addon and Integration Subsystem
cverports profile

CVE-2026-63004: CVE-2026-63004: Server-Side Request Forgery in Unleash Addon and Integration Subsystem

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63466: CVE-2026-63466: Process-Wide Security Degradation via Global Module Mutation in Unleash
cverports profile

CVE-2026-63466: CVE-2026-63466: Process-Wide Security Degradation via Global Module Mutation in Unleash

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-76904: CVE-2026-76904: Unauthenticated SQL Injection in GeoTools PostGIS DataStore Component
cverports profile

CVE-2026-76904: CVE-2026-76904: Unauthenticated SQL Injection in GeoTools PostGIS DataStore Component

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-61824: CVE-2026-61824: High-Severity Cross-Site Scripting (XSS) via Unsanitized Site Extractors in Defuddle
cverports profile

CVE-2026-61824: CVE-2026-61824: High-Severity Cross-Site Scripting (XSS) via Unsanitized Site Extractors in Defuddle

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63421: CVE-2026-63421: Query Limit Bypass via Negative Integer Input in KeystoneJS core resolvers
cverports profile

CVE-2026-63421: CVE-2026-63421: Query Limit Bypass via Negative Integer Input in KeystoneJS core resolvers

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-64679: CVE-2026-64679: Directory Traversal via Workspace Parameter in Atlantis
cverports profile

CVE-2026-64679: CVE-2026-64679: Directory Traversal via Workspace Parameter in Atlantis

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-76905: CVE-2026-76905: Denial of Service via Nil-Pointer Dereference in getkin/kin-openapi openapi3filter
cverports profile

CVE-2026-76905: CVE-2026-76905: Denial of Service via Nil-Pointer Dereference in getkin/kin-openapi openapi3filter

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59989: CVE-2026-59989: Remote Code Execution via Server-Side Template Injection in Phalcon Volt Engine
cverports profile

CVE-2026-59989: CVE-2026-59989: Remote Code Execution via Server-Side Template Injection in Phalcon Volt Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61539: CVE-2026-61539: Remote Code Execution via Llama3 Tool Parser Eval Injection in Xinference
cverports profile

CVE-2026-61539: CVE-2026-61539: Remote Code Execution via Llama3 Tool Parser Eval Injection in Xinference

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77354: CVE-2026-77354: Uncontrolled Resource Consumption (OOM) via Sparse Array Indexes in kin-openapi
cverports profile

CVE-2026-77354: CVE-2026-77354: Uncontrolled Resource Consumption (OOM) via Sparse Array Indexes in kin-openapi

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77413: CVE-2026-77413: Remote Code Execution via Prototype Chain Bypass in JSONata Evaluator
cverports profile

CVE-2026-77413: CVE-2026-77413: Remote Code Execution via Prototype Chain Bypass in JSONata Evaluator

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63135: CVE-2026-63135: Stored Cross-Site Scripting (XSS) via Referer Header in YOURLS
cverports profile

CVE-2026-63135: CVE-2026-63135: Stored Cross-Site Scripting (XSS) via Referer Header in YOURLS

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68508: CVE-2026-68508: Arbitrary Code Execution via Unsafe Dynamic Instantiation in Hydra Core
cverports profile

CVE-2026-68508: CVE-2026-68508: Arbitrary Code Execution via Unsafe Dynamic Instantiation in Hydra Core

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77415: CVE-2026-77415: Sandbox Escape and Arbitrary Code Execution in JSONata Engine
cverports profile

CVE-2026-77415: CVE-2026-77415: Sandbox Escape and Arbitrary Code Execution in JSONata Engine

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77414: CVE-2026-77414: Critical Sandbox Escape and Remote Code Execution in JSONata via Prototype Pollution
cverports profile

CVE-2026-77414: CVE-2026-77414: Critical Sandbox Escape and Remote Code Execution in JSONata via Prototype Pollution

#security #cve #cybersecurity
Comments
3 min read
GHSA-8HGV-XC77-JMCR: GHSA-8HGV-XC77-JMCR: Privilege Escalation to Super-Admin via Twig Sandbox Escape and Stored XSS in Grav CMS Assets
cverports profile

GHSA-8HGV-XC77-JMCR: GHSA-8HGV-XC77-JMCR: Privilege Escalation to Super-Admin via Twig Sandbox Escape and Stored XSS in Grav CMS Assets

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-8CFW-PCWH-V63W: GHSA-8CFW-PCWH-V63W: Authenticated Twig Sandbox Escape and Remote Code Execution in Winter CMS
cverports profile

GHSA-8CFW-PCWH-V63W: GHSA-8CFW-PCWH-V63W: Authenticated Twig Sandbox Escape and Remote Code Execution in Winter CMS

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-Q9C5-PP7M-FM2G: GHSA-Q9C5-PP7M-FM2G: Missing Authorization in Fleet Enterprise iOS Application Distribution Endpoints
cverports profile

GHSA-Q9C5-PP7M-FM2G: GHSA-Q9C5-PP7M-FM2G: Missing Authorization in Fleet Enterprise iOS Application Distribution Endpoints

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-59995: CVE-2026-59995: Relative Path Traversal in OpenSSH sftp Client
cverports profile

CVE-2026-59995: CVE-2026-59995: Relative Path Traversal in OpenSSH sftp Client

#security #cve #cybersecurity
Comments
2 min read
GHSA-RXHG-VCWW-2MPW: GHSA-RXHG-VCWW-2MPW: SQL Injection via ORDER BY Column Injection in Fleet Activity List Endpoints
cverports profile

GHSA-RXHG-VCWW-2MPW: GHSA-RXHG-VCWW-2MPW: SQL Injection via ORDER BY Column Injection in Fleet Activity List Endpoints

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-7MPF-4465-7FC2: GHSA-7mpf-4465-7fc2: Stored Cross-Site Scripting in Winter CMS Backend List Widget
cverports profile

GHSA-7MPF-4465-7FC2: GHSA-7mpf-4465-7fc2: Stored Cross-Site Scripting in Winter CMS Backend List Widget

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-MPMW-F6H6-3G26: GHSA-mpmw-f6h6-3g26: Insecure Direct Object Reference in Winter CMS My Account Controller
cverports profile

GHSA-MPMW-F6H6-3G26: GHSA-mpmw-f6h6-3g26: Insecure Direct Object Reference in Winter CMS My Account Controller

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-FM29-4MQ3-PHG6: GHSA-FM29-4MQ3-PHG6: Missing Authorization in Winter CMS ImportExportController Behavior
cverports profile

GHSA-FM29-4MQ3-PHG6: GHSA-FM29-4MQ3-PHG6: Missing Authorization in Winter CMS ImportExportController Behavior

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-5CWR-5JXG-PCF6: GHSA-5CWR-5JXG-PCF6: Stored Cross-Site Scripting via Improper Cache Sanitization in Winter CMS Custom Styles
cverports profile

GHSA-5CWR-5JXG-PCF6: GHSA-5CWR-5JXG-PCF6: Stored Cross-Site Scripting via Improper Cache Sanitization in Winter CMS Custom Styles

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-P2CH-C2C3-4XM5: GHSA-P2CH-C2C3-4XM5: Cross-Site Request Forgery in Winter CMS AJAX Routing
cverports profile

GHSA-P2CH-C2C3-4XM5: GHSA-P2CH-C2C3-4XM5: Cross-Site Request Forgery in Winter CMS AJAX Routing

#security #cve #cybersecurity #ghsa
Comments
1 min read
GHSA-HQ84-X37P-J6Q5: GHSA-HQ84-X37P-J6Q5: Reflected Cross-Site Scripting in Winter CMS Backend Table Widget
cverports profile

GHSA-HQ84-X37P-J6Q5: GHSA-HQ84-X37P-J6Q5: Reflected Cross-Site Scripting in Winter CMS Backend Table Widget

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-92HV-J533-69WC: GHSA-92HV-J533-69WC: Information Disclosure via ETag Conditional Matching in Wagtail CMS
cverports profile

GHSA-92HV-J533-69WC: GHSA-92HV-J533-69WC: Information Disclosure via ETag Conditional Matching in Wagtail CMS

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-C2XX-CJMH-9Q8F: GHSA-C2XX-CJMH-9Q8F: Information Disclosure via Inherited Collection View Restriction Bypass in Wagtail API v2
cverports profile

GHSA-C2XX-CJMH-9Q8F: GHSA-C2XX-CJMH-9Q8F: Information Disclosure via Inherited Collection View Restriction Bypass in Wagtail API v2

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-X5CX-W6P2-MXF2: GHSA-X5CX-W6P2-MXF2: Improper Permission Handling in Wagtail Snippet Copy Functionality
cverports profile

GHSA-X5CX-W6P2-MXF2: GHSA-X5CX-W6P2-MXF2: Improper Permission Handling in Wagtail Snippet Copy Functionality

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-JM5P-837G-RV8G: GHSA-JM5P-837G-RV8G: Insecure Direct Object Reference (IDOR) in Wagtail Page Translation Endpoint
cverports profile

GHSA-JM5P-837G-RV8G: GHSA-JM5P-837G-RV8G: Insecure Direct Object Reference (IDOR) in Wagtail Page Translation Endpoint

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-67447: CVE-2026-67447: Unbounded Memory Allocation leading to Denial of Service in Mailpit SMTP Server
cverports profile

CVE-2026-67447: CVE-2026-67447: Unbounded Memory Allocation leading to Denial of Service in Mailpit SMTP Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67448: CVE-2026-67448: Cross-Site WebSocket Hijacking via Path Normalization Discrepancy in Mailpit
cverports profile

CVE-2026-67448: CVE-2026-67448: Cross-Site WebSocket Hijacking via Path Normalization Discrepancy in Mailpit

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54061: CVE-2026-54061: Unauthenticated Database Wipe and Replacement in Dgraph Alpha
cverports profile

CVE-2026-54061: CVE-2026-54061: Unauthenticated Database Wipe and Replacement in Dgraph Alpha

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-53951: CVE-2026-53951: Trust-Prefix Bypass via Path Traversal leading to Remote Code Execution in Copier
cverports profile

CVE-2026-53951: CVE-2026-53951: Trust-Prefix Bypass via Path Traversal leading to Remote Code Execution in Copier

#security #cve #cybersecurity
Comments
2 min read
GHSA-P77J-G7H5-R2VW: GHSA-P77J-G7H5-R2VW: Tier-0 Security Hardening in GeoLens
cverports profile

GHSA-P77J-G7H5-R2VW: GHSA-P77J-G7H5-R2VW: Tier-0 Security Hardening in GeoLens

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-55694: CVE-2026-55694: Chained Information Disclosure and IDOR in Snipe-IT EULA Management
cverports profile

CVE-2026-55694: CVE-2026-55694: Chained Information Disclosure and IDOR in Snipe-IT EULA Management

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55703: CVE-2026-55703: Missing Authorization in Snipe-IT Maintenance Records
cverports profile

CVE-2026-55703: CVE-2026-55703: Missing Authorization in Snipe-IT Maintenance Records

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61807: CVE-2026-61807: Stored DOM-Based Cross-Site Scripting in Snipe-IT
cverports profile

CVE-2026-61807: CVE-2026-61807: Stored DOM-Based Cross-Site Scripting in Snipe-IT

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62673: CVE-2026-62673: Security Bypass in Grav CMS via Case-Sensitivity Mismatch
cverports profile

CVE-2026-62673: CVE-2026-62673: Security Bypass in Grav CMS via Case-Sensitivity Mismatch

#security #cve #cybersecurity
Comments
2 min read
GHSA-HJWH-XVFW-QRWJ: GHSA-HJWH-XVFW-QRWJ: Credential Disclosure via Diagnostic Boundaries in mcp-searxng
cverports profile

GHSA-HJWH-XVFW-QRWJ: GHSA-HJWH-XVFW-QRWJ: Credential Disclosure via Diagnostic Boundaries in mcp-searxng

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-61711: CVE-2026-61711: Sandbox Escape via Protobuf SecurityMode Enum Validation Bypass in Moby BuildKit
cverports profile

CVE-2026-61711: CVE-2026-61711: Sandbox Escape via Protobuf SecurityMode Enum Validation Bypass in Moby BuildKit

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61712: CVE-2026-61712: Denial of Service via Unbounded Resource Allocation in moby/buildkit
cverports profile

CVE-2026-61712: CVE-2026-61712: Denial of Service via Unbounded Resource Allocation in moby/buildkit

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-59992: CVE-2026-59992: Broken Access Control and Path Traversal in Tina CMS Production Media Adapters
cverports profile

CVE-2026-59992: CVE-2026-59992: Broken Access Control and Path Traversal in Tina CMS Production Media Adapters

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-63123: CVE-2026-63123: Cross-Site Request Forgery leading to Cross-Origin Arbitrary File Write in @tinacms/cli
cverports profile

CVE-2026-63123: CVE-2026-63123: Cross-Site Request Forgery leading to Cross-Origin Arbitrary File Write in @tinacms/cli

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63188: CVE-2026-63188: Unauthenticated Directory Traversal in @logto/tunnel
cverports profile

CVE-2026-63188: CVE-2026-63188: Unauthenticated Directory Traversal in @logto/tunnel

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54347: CVE-2026-54347: Stored Cross-Site Scripting in Froxlor DNS TXT Record Configuration
cverports profile

CVE-2026-54347: CVE-2026-54347: Stored Cross-Site Scripting in Froxlor DNS TXT Record Configuration

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-54348: CVE-2026-54348: Second-Order SQL Injection in Froxlor API Layer
cverports profile

CVE-2026-54348: CVE-2026-54348: Second-Order SQL Injection in Froxlor API Layer

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-54543: CVE-2026-54543: DNS Resource Record (RR) Injection in Froxlor DomainZones API
cverports profile

CVE-2026-54543: CVE-2026-54543: DNS Resource Record (RR) Injection in Froxlor DomainZones API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-42533: CVE-2026-42533: NGINX Map Directive and Regex Matching Pre-Auth Heap Buffer Overflow & Info Leak
cverports profile

CVE-2026-42533: CVE-2026-42533: NGINX Map Directive and Regex Matching Pre-Auth Heap Buffer Overflow & Info Leak

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-55593: CVE-2026-55593: Persistent Administrative Hijacking via Cross-Site Request Forgery in Froxlor Ajax Router
cverports profile

CVE-2026-55593: CVE-2026-55593: Persistent Administrative Hijacking via Cross-Site Request Forgery in Froxlor Ajax Router

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62988: CVE-2026-62988: Multi-Factor Authentication and Credential Bypass in Froxlor API
cverports profile

CVE-2026-62988: CVE-2026-62988: Multi-Factor Authentication and Credential Bypass in Froxlor API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70666: CVE-2026-70666: Server-Side Request Forgery in Netflix Lemur ACME Authority Management
cverports profile

CVE-2026-70666: CVE-2026-70666: Server-Side Request Forgery in Netflix Lemur ACME Authority Management

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-70667: CVE-2026-70667: Server-Side Request Forgery Bypass in Netflix Lemur Certificate Verification
cverports profile

CVE-2026-70667: CVE-2026-70667: Server-Side Request Forgery Bypass in Netflix Lemur Certificate Verification

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71303: CVE-2026-71303: Server-Side Request Forgery Bypass in Netflix Lemur Authority Updates
cverports profile

CVE-2026-71303: CVE-2026-71303: Server-Side Request Forgery Bypass in Netflix Lemur Authority Updates

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-71307: CVE-2026-71307: Plaintext Credential Exposure in Netflix Lemur Destinations API
cverports profile

CVE-2026-71307: CVE-2026-71307: Plaintext Credential Exposure in Netflix Lemur Destinations API

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71308: CVE-2026-71308: Missing Authorization and Lifecycle Hijacking in Netflix Lemur
cverports profile

CVE-2026-71308: CVE-2026-71308: Missing Authorization and Lifecycle Hijacking in Netflix Lemur

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71317: CVE-2026-71317: Missing Authorization in Netflix Lemur Allows Unauthorized Subordinate CA Creation
cverports profile

CVE-2026-71317: CVE-2026-71317: Missing Authorization in Netflix Lemur Allows Unauthorized Subordinate CA Creation

#security #cve #cybersecurity
Comments
2 min read
loading...