CVE Notifier

CVE-2026-61548 CWE-121 8.1

Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data

Rsyslog is a rocket-fast system for log processing. From 7.5.4 until 8.2606.0, the optional mmpstrucdata plugin's parseSD_PARAM function in plugins/mmpstrucdata/mmpstrucdata.c stores RFC5424 parameter values in a fixed p…

cve.org rsyslog:rsyslog 1 hari lalu

CVE-2026-55556 CWE-122 N/A

Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parse_auth_header function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with calloc(0, len) w…

cve.org rsyslog:rsyslog 1 hari lalu

CVE-2026-77609 CWE-601 6.1

Semantic MediaWiki has an open redirect in Special:URIResolver

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `Special:URIResolver` resolves its user-controlled subpage to a Media…

cve.org SemanticMediaWiki:SemanticMediaWiki 1 hari lalu

CVE-2026-63406 CWE-312 5.9

AnyCable: Telemetry Subsystem Contains Hardcoded Authentication Token and Transmits CLI Arguments Including Secrets

AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the telemetry subsystem in telemetry/config.go enables tracking with a hardcoded public authToken, while cluste…

cve.org anycable:anycable 1 hari lalu

CVE-2026-77607 CWE-79 6.1

Semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS

Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users store and query data within the wiki's pages. Prior to version 7.2.0, `sep` was inserted verbatim into HTML cell joins. This made it possib…

cve.org SemanticMediaWiki:SemanticMediaWiki 1 hari lalu

CVE-2026-63405 CWE-345 5.9

AnyCable: Pusher REST API Does Not Verify Request Body MD5 Enabling Signed-Request Replay with Arbitrary Body

AnyCable is a realtime server for reliable two-way communication that supports any backend. Prior to 1.6.15, the Pusher-compatible REST API in pusher/http.go includes the caller-supplied body_md5 value in the HMAC input …

cve.org anycable:anycable 1 hari lalu

CVE-2026-46655 CWE-122 7.8

virtio-win: Integer overflow causing a heap overflow in Viosock driver

virtio-win provides Windows paravirtualized drivers for QEMU and KVM. From mm210 until mm320, the Viosock driver permits a low-privilege local process to submit an IOCTL_SELECT request with attacker-controlled VIRTIO_VSO…

cve.org virtio-win:kvm-guest-drivers-windows 1 hari lalu

CVE-2026-77239 CWE-285 8.1

WACRM: Service-role routes missing a role check

WACRM is a self-hostable CRM template for WhatsApp. In version 0.7.0 and earlier, WACRM flow and automation write routes authenticate account viewers but do not enforce the agent role before using a service-role database…

cve.org ArnasDon:wacrm 1 hari lalu

CVE-2026-93559 CWE-306 7.3

Forget-C Jellyfish AI Short Drama Studio FastAPI dependencies.py missing authentication

A vulnerability was identified in Forget-C Jellyfish AI Short Drama Studio 0.1.0-alpha/0.2.0/0.3.0/0.3.1/0.3.2. This affects an unknown function of the file backend/app/dependencies.py of the component FastAPI. The manip…

cve.org Forget-C:Jellyfish · AI · Short 1 hari lalu

CVE-2026-91142 CWE-787 3.6

Cockpit: integer overflow in `do_lastlog()` offset calculation can misaddress `lastlog` entries on ilp32 builds

A flaw was found in Cockpit. An integer overflow vulnerability in the `do_lastlog()` function, specifically in the offset calculation for `lastlog` entries on ILP32 (Integer, Long, Pointer 32-bit) builds, can be exploite…

cve.org Red · Hat:Red · Hat 1 hari lalu

CVE-2026-91147 CWE-617 5.9

Cockpit: cockpit: denial of service in `cockpit-ws` due to url-root handling without a trailing slash

A flaw was found in `cockpit-ws`. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a specially crafted request. When the `WebService.UrlRoot` is configured and a …

cve.org Red · Hat:Red · Hat 1 hari lalu

CVE-2026-91149 CWE-770 7.5

Cockpit: cockpit: denial of service via unbounded connection thread spawning

A flaw was found in Cockpit. An unauthenticated remote attacker can exploit this vulnerability by initiating and sustaining numerous simultaneous connections to the `cockpit-tls` service. This forces the service to creat…

cve.org Red · Hat:Red · Hat 1 hari lalu