Tagged “cve.org”
CVEs tagged cve.org, newest first.
47818 CVEsRSS
CVE-2026-113743Medium· 6.3PoCTenstorrent tt-metal load_checkpoints.py load_hf_state_dict_filtered path traversal
A weakness has been identified in Tenstorrent tt-metal up to 0.80.0. The affected element is the function load_hf_state_dict_filtered of the file models/tt_transformers/tt/load_checkpoints.py. This manipulation of the argument weight_map…
CVE-2026-111943Medium· 6.8PoCDistrust compromised intermediate certificates in crypto/x509
On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action. To defend against the narrower set of cases that may remain affected, a de…
CVE-2026-113744Critical· 10.0PoCTenda AC19 httpd Web Management Service SetFirewallCfg formSetFirewallCfg stack-based overflow
A security vulnerability has been detected in Tenda AC19 16.03.10.07. The impacted element is the function formSetFirewallCfg of the file /goform/SetFirewallCfg of the component httpd Web Management Service. Such manipulation of the argu…
CVE-2026-82814High· 8.8Duplicator <= 1.5.17 and Duplicator Pro <= 4.6.10 - Unauthenticated PHP Object Injection
The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to, and including, 1.5.17 and 4.6.10, respectively, via deserialization of untrusted database content in DUPX_UpdateEngine:…
CVE-2026-113729High· 7.5Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization
Moov signedxml: Unauthenticated denial of service in exclusive XML canonicalization
CVE-2026-113730Medium· 5.6OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies
OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies
CVE-2026-113776High· 7.8virtualenv activation scripts run code from a path that contains a placeholder name
virtualenv activation scripts run code from a path that contains a placeholder name
CVE-2026-113732High· 7.8virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote
virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote
CVE-2026-113726High· 7.8virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST
virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST
CVE-2026-113727High· 7.4OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs
OpenChoreo: Authorization bypass on WorkflowRun update allows cross-project takeover of workflow runs
CVE-2026-113716Medium· 4.5virtualenv: Builtin creation follows linked environment directories
virtualenv: Builtin creation follows linked environment directories
CVE-2026-113722High· 7.8PoCvirtualenv: Generated POSIX console launchers interpret destination paths as shell syntax
virtualenv: Generated POSIX console launchers interpret destination paths as shell syntax
CVE-2026-113724Medium· 4.5PoCvirtualenv: Deletion recovery can change a symlink target's mode
virtualenv: Deletion recovery can change a symlink target's mode
CVE-2026-113725High· 7.8virtualenv bash activate runs commands from an environment name with a backslash before $
virtualenv bash activate runs commands from an environment name with a backslash before $
CVE-2026-113711High· 7.5PoCApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export
ApostropheCMS: Unauthenticated resource exhaustion via pre-auth aposBigUpload processing in @apostrophecms/import-export
CVE-2026-112957Medium· 4.3ApostropheCMS: GET /api/v1/@apostrophecms/page/:id bypasses viewRole restriction and exposes viewPermission-gated fields to lower-privileged users
ApostropheCMS: GET /api/v1/@apostrophecms/page/:id bypasses viewRole restriction and exposes viewPermission-gated fields to lower-privileged users
CVE-2026-112958Medium· 5.4PoCApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization
ApostropheCMS: Stored XSS via Unescaped Widget Style Attribute Serialization
CVE-2026-112946Medium· 6.3PoCVite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine
Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine
CVE-2026-112947Medium· 6.3Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`
Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`
CVE-2026-112948Medium· 6.5Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file
CVE-2026-112951Medium· 5.4PoCApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix
ApostropheCMS: Color field validation bypass allows stored XSS via HTML appended after rgb()/hsl() prefix
CVE-2026-112953Medium· 6.0PoCApostropheCMS: Exposure of Sensitive Information via predictable export filenames
ApostropheCMS: Exposure of Sensitive Information via predictable export filenames
CVE-2026-112952Medium· 4.3ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user
ApostropheCMS: POST /api/v1/@apostrophecms/doc/slugTaken discloses existence of private/admin-only content to any authenticated user
CVE-2026-112956Medium· 6.5ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content
ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content
CVE-2026-112900Critical· 9.2PoCPillow: Argument Injection in Ghostscript call, potentially leading into RCE
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
CVE-2026-112894High· 7.5PoCPillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
CVE-2026-112901Medium· 7.5Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutes
CVE-2026-112390High· 7.5PoCPillow: Infinite loop in MIC n_frames when the embedded TIFF
Pillow: Infinite loop in MIC n_frames when the embedded TIFF
CVE-2026-112394Medium· 8.2PoCPillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size
CVE-2026-112391Medium· 7.5Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()
Pillow: PdfParser can recurse without limit in get_value() and linearize_page_tree()