DEV Community

CVE Reports profile picture

CVE Reports

CVEReports provides daily, automated deep-dives into the latest vulnerabilities, transforming emerging threats into comprehensive technical intelligence.

Joined Joined on  Personal website https://www.cvereports.com
CVE-2026-72808: CVE-2026-72808: Unauthorized PDF Annotation Access in SiYuan Knowledge Management System
cverports profile

CVE-2026-72808: CVE-2026-72808: Unauthorized PDF Annotation Access in SiYuan Knowledge Management System

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72807: CVE-2026-72807: Second-Order SQL Injection via Attribute View Templates in SiYuan
cverports profile

CVE-2026-72807: CVE-2026-72807: Second-Order SQL Injection via Attribute View Templates in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72806: CVE-2026-72806: Missing Authorization in SiYuan Attribute View Rendering Leads to Information Disclosure
cverports profile

CVE-2026-72806: CVE-2026-72806: Missing Authorization in SiYuan Attribute View Rendering Leads to Information Disclosure

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72805: CVE-2026-72805: Missing Authorization in SiYuan Note Block APIs Leads to Information Disclosure
cverports profile

CVE-2026-72805: CVE-2026-72805: Missing Authorization in SiYuan Note Block APIs Leads to Information Disclosure

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72804: CVE-2026-72804: Authentication Bypass and Sensitive Information Exposure in SiYuan Graph Endpoints
cverports profile

CVE-2026-72804: CVE-2026-72804: Authentication Bypass and Sensitive Information Exposure in SiYuan Graph Endpoints

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72802: CVE-2026-72802: Sensitive Information Disclosure via Administrative Asset Resolvers in SiYuan Note
cverports profile

CVE-2026-72802: CVE-2026-72802: Sensitive Information Disclosure via Administrative Asset Resolvers in SiYuan Note

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-72801: CVE-2026-72801: Information Disclosure of Cryptographic Key Material in SiYuan
cverports profile

CVE-2026-72801: CVE-2026-72801: Information Disclosure of Cryptographic Key Material in SiYuan

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72800: CVE-2026-72800: Missing Authorization in SiYuan Personal Knowledge Management System
cverports profile

CVE-2026-72800: CVE-2026-72800: Missing Authorization in SiYuan Personal Knowledge Management System

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72803: CVE-2026-72803: Information Disclosure via Missing Authorization in SiYuan API
cverports profile

CVE-2026-72803: CVE-2026-72803: Information Disclosure via Missing Authorization in SiYuan API

#security #cve #cybersecurity
Comments
2 min read
GHSA-7J72-F6WG-CXW6: CVE-2026-68584: Authentication Bypass via Auxiliary Content Endpoints in SiYuan
cverports profile

GHSA-7J72-F6WG-CXW6: CVE-2026-68584: Authentication Bypass via Auxiliary Content Endpoints in SiYuan

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-77465: CVE-2026-77465: Uncontrolled Recursion in toml-node Deserializer Leads to Denial of Service
cverports profile

CVE-2026-77465: CVE-2026-77465: Uncontrolled Recursion in toml-node Deserializer Leads to Denial of Service

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73295: CVE-2026-73295: DOM-based Cross-Site Scripting (XSS) in Material for MkDocs Search Suggestions
cverports profile

CVE-2026-73295: CVE-2026-73295: DOM-based Cross-Site Scripting (XSS) in Material for MkDocs Search Suggestions

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-71869: CVE-2026-71869: Remote Code Execution in Orval via OpenAPI Default Value Template Literal Injection
cverports profile

CVE-2026-71869: CVE-2026-71869: Remote Code Execution in Orval via OpenAPI Default Value Template Literal Injection

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-61625: CVE-2026-61625: Arbitrary File Write via Path Traversal in VictoriaMetrics vmrestore
cverports profile

CVE-2026-61625: CVE-2026-61625: Arbitrary File Write via Path Traversal in VictoriaMetrics vmrestore

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73846: CVE-2026-73846: Cache Key Canonicalization Collision in ondata ckan-mcp-server
cverports profile

CVE-2026-73846: CVE-2026-73846: Cache Key Canonicalization Collision in ondata ckan-mcp-server

#security #cve #cybersecurity
Comments
2 min read
GHSA-99RQ-75J6-5J9F: GHSA-99rq-75j6-5j9f: Stored and Reflected XSS in SiYuan via SVG Sanitizer Bypass
cverports profile

GHSA-99RQ-75J6-5J9F: GHSA-99rq-75j6-5j9f: Stored and Reflected XSS in SiYuan via SVG Sanitizer Bypass

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-GW25-M53R-QH88: GHSA-gw25-m53r-qh88: Path Traversal Bypass in SiYuan Notebook via /export/temp/ Short-Circuit Branch
cverports profile

GHSA-GW25-M53R-QH88: GHSA-gw25-m53r-qh88: Path Traversal Bypass in SiYuan Notebook via /export/temp/ Short-Circuit Branch

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-62669: CVE-2026-62669: Critical Two-Factor Authentication Bypass in Grav CMS Login Plugin
cverports profile

CVE-2026-62669: CVE-2026-62669: Critical Two-Factor Authentication Bypass in Grav CMS Login Plugin

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63435: CVE-2026-63435: Parser Interpretation Conflict in Ruby Mail Gem RFC 2047 Decoders
cverports profile

CVE-2026-63435: CVE-2026-63435: Parser Interpretation Conflict in Ruby Mail Gem RFC 2047 Decoders

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63481: CVE-2026-63481: Sensitive Information Exposure in Hurl [Cookies] Redirection
cverports profile

CVE-2026-63481: CVE-2026-63481: Sensitive Information Exposure in Hurl [Cookies] Redirection

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-63490: CVE-2026-63490: Path Traversal and Arbitrary File Disclosure in Handlebars.java
cverports profile

CVE-2026-63490: CVE-2026-63490: Path Traversal and Arbitrary File Disclosure in Handlebars.java

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-4692: CVE-2026-4692: Sandbox Escape via Responsive Design Mode in Mozilla Firefox and Thunderbird
cverports profile

CVE-2026-4692: CVE-2026-4692: Sandbox Escape via Responsive Design Mode in Mozilla Firefox and Thunderbird

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-65842: CVE-2026-65842: Server-Side Request Forgery with Response Disclosure in @platejs/docx-io
cverports profile

CVE-2026-65842: CVE-2026-65842: Server-Side Request Forgery with Response Disclosure in @platejs/docx-io

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-2763: CVE-2026-2763: Use-After-Free in SpiderMonkey Generator for-in Loops
cverports profile

CVE-2026-2763: CVE-2026-2763: Use-After-Free in SpiderMonkey Generator for-in Loops

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-60206: CVE-2026-60206: Unauthenticated SAML Authentication Bypass in Oracle WebLogic Server
cverports profile

CVE-2026-60206: CVE-2026-60206: Unauthenticated SAML Authentication Bypass in Oracle WebLogic Server

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62676: CVE-2026-62676: Security Guardrail Policy Bypass via Shell-Command Parser Flaws in Omnigent AI Agent Framework
cverports profile

CVE-2026-62676: CVE-2026-62676: Security Guardrail Policy Bypass via Shell-Command Parser Flaws in Omnigent AI Agent Framework

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-68921: CVE-2026-68921: Cross-Site Scripting via SVG Attribute Injection in DiceBear
cverports profile

CVE-2026-68921: CVE-2026-68921: Cross-Site Scripting via SVG Attribute Injection in DiceBear

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67446: CVE-2026-67446: Unbounded Image Dimension Decoding in Mailpit Thumbnail Generation
cverports profile

CVE-2026-67446: CVE-2026-67446: Unbounded Image Dimension Decoding in Mailpit Thumbnail Generation

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-72921: CVE-2026-72921: Incorrect Authorization in SeaweedFS Filer JWT Prefix Match
cverports profile

CVE-2026-72921: CVE-2026-72921: Incorrect Authorization in SeaweedFS Filer JWT Prefix Match

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-67445: CVE-2026-67445: Uncontrolled Memory Resource Consumption in Mailpit SMTP and POP3 Services
cverports profile

CVE-2026-67445: CVE-2026-67445: Uncontrolled Memory Resource Consumption in Mailpit SMTP and POP3 Services

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73843: CVE-2026-73843: Critical Missing Authentication and Privilege Escalation in OpenChoreo Cluster Gateway
cverports profile

CVE-2026-73843: CVE-2026-73843: Critical Missing Authentication and Privilege Escalation in OpenChoreo Cluster Gateway

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73841: CVE-2026-73841: Broken Object Level Authorization (BOLA) in OpenChoreo Container Exec and Wirelogs Endpoints
cverports profile

CVE-2026-73841: CVE-2026-73841: Broken Object Level Authorization (BOLA) in OpenChoreo Container Exec and Wirelogs Endpoints

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73840: CVE-2026-73840: Unauthenticated Webhook Signature Bypass and Git-Provider Confusion in OpenChoreo
cverports profile

CVE-2026-73840: CVE-2026-73840: Unauthenticated Webhook Signature Bypass and Git-Provider Confusion in OpenChoreo

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-73667: CVE-2026-73667: Remote Code Execution via OS Command Injection in OpenChoreo Workflow Plane
cverports profile

CVE-2026-73667: CVE-2026-73667: Remote Code Execution via OS Command Injection in OpenChoreo Workflow Plane

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84366: CVE-2026-84366: Plaintext AWS Credential Exposure in Scrapy S3DownloadHandler
cverports profile

CVE-2026-84366: CVE-2026-84366: Plaintext AWS Credential Exposure in Scrapy S3DownloadHandler

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62674: CVE-2026-62674: Shared Agent Bundle Overwrite Leads to Authenticated Runner Remote Code Execution in omnigent
cverports profile

CVE-2026-62674: CVE-2026-62674: Shared Agent Bundle Overwrite Leads to Authenticated Runner Remote Code Execution in omnigent

#security #cve #cybersecurity
1
Comments
2 min read
CVE-2026-63311: CVE-2026-63311: Server-Side Request Forgery and DNS Rebinding in Natural Language Toolkit (NLTK)
cverports profile

CVE-2026-63311: CVE-2026-63311: Server-Side Request Forgery and DNS Rebinding in Natural Language Toolkit (NLTK)

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-62388: CVE-2026-62388: Insecure Default Security Enforcement in Natural Language Toolkit (NLTK) Path Security Module
cverports profile

CVE-2026-62388: CVE-2026-62388: Insecure Default Security Enforcement in Natural Language Toolkit (NLTK) Path Security Module

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-76172: CVE-2026-76172: Parser Differential and Host Confusion in fast-uri
cverports profile

CVE-2026-76172: CVE-2026-76172: Parser Differential and Host Confusion in fast-uri

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75899: CVE-2026-75899: Double-Decoding Host Bypass and SSRF in fast-uri
cverports profile

CVE-2026-75899: CVE-2026-75899: Double-Decoding Host Bypass and SSRF in fast-uri

#security #cve #cybersecurity
Comments
3 min read
CVE-2026-75975: CVE-2026-75975: Server-Side Request Forgery (SSRF) and Address-Policy Bypass via Malformed IPv6 Parser in fast-uri
cverports profile

CVE-2026-75975: CVE-2026-75975: Server-Side Request Forgery (SSRF) and Address-Policy Bypass via Malformed IPv6 Parser in fast-uri

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-75931: CVE-2026-75931: Host Confusion and SSRF Bypass via Scheme-Relative URIs in fast-uri
cverports profile

CVE-2026-75931: CVE-2026-75931: Host Confusion and SSRF Bypass via Scheme-Relative URIs in fast-uri

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-82395: CVE-2026-82395: Insecure Direct Object Reference (IDOR) in Sulu CMS Media Move Authorization
cverports profile

CVE-2026-82395: CVE-2026-82395: Insecure Direct Object Reference (IDOR) in Sulu CMS Media Move Authorization

#security #cve #cybersecurity
Comments
2 min read
GHSA-WWV5-G3V4-889X: GHSA-wwv5-g3v4-889x: Cookie Attribute Injection in Tornado via Legacy Case-Insensitive kwargs
cverports profile

GHSA-WWV5-G3V4-889X: GHSA-wwv5-g3v4-889x: Cookie Attribute Injection in Tornado via Legacy Case-Insensitive kwargs

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-8423-8FGW-73VQ: GHSA-8423-8FGW-73VQ: Memory Amplification Denial of Service in Tornado Multipart Form Parser
cverports profile

GHSA-8423-8FGW-73VQ: GHSA-8423-8FGW-73VQ: Memory Amplification Denial of Service in Tornado Multipart Form Parser

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-J8PM-GJ4C-RQ4X: GHSA-J8PM-GJ4C-RQ4X: Algorithmic Complexity Denial of Service in league/commonmark
cverports profile

GHSA-J8PM-GJ4C-RQ4X: GHSA-J8PM-GJ4C-RQ4X: Algorithmic Complexity Denial of Service in league/commonmark

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-F8FG-PG57-V4J8: GHSA-f8fg-pg57-v4j8: Sanitizer Filter Bypass via Control Character Injection in league/commonmark
cverports profile

GHSA-F8FG-PG57-V4J8: GHSA-f8fg-pg57-v4j8: Sanitizer Filter Bypass via Control Character Injection in league/commonmark

#security #cve #cybersecurity #ghsa
Comments
2 min read
GHSA-JJV6-8J6V-6J52: GHSA-JJV6-8J6V-6J52: Algorithmic Complexity Denial of Service in league/commonmark
cverports profile

GHSA-JJV6-8J6V-6J52: GHSA-JJV6-8J6V-6J52: Algorithmic Complexity Denial of Service in league/commonmark

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-78680: CVE-2026-78680: Arbitrary Code Execution in NLTK via Untrusted Graphviz Path Resolution
cverports profile

CVE-2026-78680: CVE-2026-78680: Arbitrary Code Execution in NLTK via Untrusted Graphviz Path Resolution

#security #cve #cybersecurity
Comments
2 min read
GHSA-8RR7-CVQ3-GMFH: GHSA-8RR7-CVQ3-GMFH: Algorithmic Complexity Denial of Service in league/commonmark AttributesExtension
cverports profile

GHSA-8RR7-CVQ3-GMFH: GHSA-8RR7-CVQ3-GMFH: Algorithmic Complexity Denial of Service in league/commonmark AttributesExtension

#security #cve #cybersecurity #ghsa
Comments
2 min read
CVE-2026-84371: CVE-2026-84371: Stored XSS via SVG SMIL URI-list Scheme-Policy Bypass in sanitize-html
cverports profile

CVE-2026-84371: CVE-2026-84371: Stored XSS via SVG SMIL URI-list Scheme-Policy Bypass in sanitize-html

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84305: CVE-2026-84305: Algorithmic Complexity Vulnerability (ReindentFilter CPU Exhaustion) in sqlparse
cverports profile

CVE-2026-84305: CVE-2026-84305: Algorithmic Complexity Vulnerability (ReindentFilter CPU Exhaustion) in sqlparse

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84309: CVE-2026-84309: Infinite Loop and CPU Exhaustion in pypdf TreeObject.insert_child
cverports profile

CVE-2026-84309: CVE-2026-84309: Infinite Loop and CPU Exhaustion in pypdf TreeObject.insert_child

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84311: CVE-2026-84311: Algorithmic Complexity Denial of Service in pypdf
cverports profile

CVE-2026-84311: CVE-2026-84311: Algorithmic Complexity Denial of Service in pypdf

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84310: CVE-2026-84310: Algorithmic Complexity Exhaustion in pypdf
cverports profile

CVE-2026-84310: CVE-2026-84310: Algorithmic Complexity Exhaustion in pypdf

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-77567: CVE-2026-77567: Multi-Factor Authentication Bypass in Filament App-Based MFA
cverports profile

CVE-2026-77567: CVE-2026-77567: Multi-Factor Authentication Bypass in Filament App-Based MFA

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84307: CVE-2026-84307: Authentication Oracle and Multi-Factor Authentication Challenge Leak in Filament
cverports profile

CVE-2026-84307: CVE-2026-84307: Authentication Oracle and Multi-Factor Authentication Challenge Leak in Filament

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84306: CVE-2026-84306: Multi-Factor Authentication Bypass via Replay Attack in Filament
cverports profile

CVE-2026-84306: CVE-2026-84306: Multi-Factor Authentication Bypass via Replay Attack in Filament

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-19418: CVE-2026-19418: Broken Access Control and Cross-Site Request Forgery in TYPO3 CMS Core
cverports profile

CVE-2026-19418: CVE-2026-19418: Broken Access Control and Cross-Site Request Forgery in TYPO3 CMS Core

#security #cve #cybersecurity
Comments
2 min read
CVE-2026-84304: CVE-2026-84304: Uncontrolled Resource Consumption in gRPC-Go HTTP/2 Frame Processing
cverports profile

CVE-2026-84304: CVE-2026-84304: Uncontrolled Resource Consumption in gRPC-Go HTTP/2 Frame Processing

#security #cve #cybersecurity
Comments
2 min read
loading...