Automatically generated suggestions

to slate a suggestion for refinement.

to mark a suggestion as irrelevant and log the reason.

View:

Compact

Detailed

Permalink CVE-2026-0774

created 5 months, 2 weeks ago Activity log

Created suggestion 5 months, 2 weeks ago

WatchYourLAN Configuration Page Argument Injection Remote Code Execution Vulnerability

ZDI-26-039 x_research-advisory

WatchYourLAN

==2.1.2

Permalink CVE-2026-21883

created 5 months, 2 weeks ago Activity log

Created suggestion 5 months, 2 weeks ago

Bokeh server applications have Incomplete Origin Validation in WebSockets

https://github.com/bokeh/bokeh/security/advisories/GHSA-793v-589g-574v x_refsource_CONFIRM
https://github.com/bokeh/bokeh/commit/cedd113b0e271b439dce768671685cf5f861812e x_refsource_MISC
https://aydinnyunus.github.io/2026/01/24/bokeh-websocket-hijacking-cve-2026-218…

bokeh

==< 3.8.2

          Permalink
          
            CVE-2026-1299
          
              created
            
          5 months, 2 weeks ago
          
      Activity log
    
              Created suggestion
            
          5 months, 2 weeks ago
          
            email BytesGenerator header injection due to unquoted newlines
          
      https://github.com/python/cpython/pull/144126
    
    patch
  
      https://github.com/python/cpython/issues/144125
    
    issue-tracking
  
      https://cve.org/CVERecord?id=CVE-2024-6923
    
    related
  
      https://mail.python.org/archives/list/security-announce@python.org/thread/6ZZUL…
    
    vendor-advisory
  
      https://github.com/python/cpython/commit/052e55e7d44718fe46cbba0ca995cb8fcc3594…
    
    patch
  
      https://github.com/python/cpython/commit/0a925ab591c45d6638f37b5e57796f36fa0e56…
    
    patch
  
      https://github.com/python/cpython/commit/7877fe424415bc4a13045e62a90a7277413d8c…
    
    patch
  
      https://github.com/python/cpython/commit/842ce19a0c0b58d61591e8f6a708c38db1fb94…
    
    patch
  
      https://github.com/python/cpython/commit/8cdf6204f4ae821f32993f8fc6bad0d318f95f…
    
    patch
  
      https://github.com/python/cpython/commit/e417f05ad77a4c30ddc07f99e90fc0cef43e83…
    
    patch
  
    CPython

            <3.13.12
          
            <3.14.3
          
            <3.15.0a6
          
            <3.15.0

Permalink CVE-2025-15059

created 5 months, 2 weeks ago Activity log

Created suggestion 5 months, 2 weeks ago

GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-25-1196 x_research-advisory
vendor-provided URL vendor-advisory

GIMP

==3.0.6

Permalink CVE-2026-1363

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 5 months, 2 weeks ago Activity log

Created suggestion 5 months, 2 weeks ago

JNC｜IAQS and I6 - Client-Side Enforcement of Server-Side Security

https://www.twcert.org.tw/tw/cp-132-10652-4cdca-1.html third-party-advisory
https://www.twcert.org.tw/en/cp-139-10653-117a1-2.html third-party-advisory

IAQS

          Permalink
          
            CVE-2026-0710
          
        8.4 HIGH
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Local (L)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): High (H)
        
          Integrity (I): High (H)
        
          Availability (A): High (H)
        
          Modified Attack Vector (MAV): Local (L)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): High (H)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): High (H)
        
          Modified Availability (MA): High (H)
        
              created
            
          5 months, 2 weeks ago
          
      Activity log
    
              Created suggestion
            
          5 months, 2 weeks ago
          
            Sipp/sipp: sipp: denial of service and potential arbitrary code execution vulnerability
          
      https://access.redhat.com/security/cve/CVE-2026-0710
    
    x_refsource_REDHATvdb-entry
  
      RHBZ#2427788
    
    issue-trackingx_refsource_REDHAT
  
    sipp

            ==3.7.3

          Permalink
          
            CVE-2025-11346
          
        6.3 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): Low (L)
        
          User Interaction (UI): None (N)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): Low (L)
        
          Integrity (I): Low (L)
        
          Availability (A): Low (L)
        
          Exploit Code Maturity (E): Not Defined (X)
        
          Remediation Level (RL): Official Fix (O)
        
          Report Confidence (RC): Confirmed (C)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): Low (L)
        
          Modified User Interaction (MUI): None (N)
        
          Modified Confidentiality (MC): Low (L)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): Low (L)
        
          Modified Availability (MA): Low (L)
        
              created
            
          5 months, 2 weeks ago
          
      Activity log
    
              Created suggestion
            
          5 months, 2 weeks ago
          
            ILIAS Base64 Decoding unserialize deserialization
          
      VDB-327231 | ILIAS Base64 Decoding unserialize deserialization
    
    technical-descriptionvdb-entry
  
      VDB-327231 | CTI Indicators (IOB, IOC, IOA)
    
    permissions-requiredsignature
  
      Submit #664892 | ILIAS open source e-Learning e. V.  ILIAS >=8.0.0, <=10.1 Deserialization
    
    third-party-advisory
  
      https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2113
    
    government-resource
  
      https://srlabs.de/blog/breaking-ilias-part-2-three-to-rce
    
    ILIAS

            ==8.19
          
            ==9.9
          
            ==8.3
          
            ==8.14
          
            ==9.6
          
            ==8.8
          
            ==9.0
          
            ==9.5
          
            ==9.10
          
            ==8.12
          
            ==8.18
          
            ==8.23
          
            ==9.1
          
            ==8.15
          
            ==8.13
          
            ==9.3
          
            ==9.12
          
            ==8.20
          
            ==8.6
          
            ==8.7
          
            ==9.11
          
            ==10.2
          
            ==9.7
          
            ==8.9
          
            ==8.10
          
            ==10.1
          
            ==9.14
          
            ==8.17
          
            ==9.13
          
            ==9.2
          
            ==8.16
          
            ==8.4
          
            ==8.1
          
            ==9.8
          
            ==8.0
          
            ==9.4
          
            ==8.22
          
            ==10.0
          
            ==8.24
          
            ==8.11
          
            ==8.5
          
            ==8.2
          
            ==8.21

          Permalink
          
            CVE-2025-11344
          
        6.3 MEDIUM
      
        CVSS version (CVSS): 3.1
      
          Attack Vector (AV): Network (N)
        
          Attack Complexity (AC): Low (L)
        
          Privileges Required (PR): None (N)
        
          User Interaction (UI): Required (R)
        
          Scope (S): Unchanged (U)
        
          Confidentiality (C): Low (L)
        
          Integrity (I): Low (L)
        
          Availability (A): Low (L)
        
          Exploit Code Maturity (E): Not Defined (X)
        
          Remediation Level (RL): Official Fix (O)
        
          Report Confidence (RC): Confirmed (C)
        
          Modified Attack Vector (MAV): Network (N)
        
          Modified Attack Complexity (MAC): Low (L)
        
          Modified Privileges Required (MPR): None (N)
        
          Modified User Interaction (MUI): Required (R)
        
          Modified Confidentiality (MC): Low (L)
        
          Modified Scope (MS): Unchanged (U)
        
          Modified Integrity (MI): Low (L)
        
          Modified Availability (MA): Low (L)
        
              created
            
          5 months, 2 weeks ago
          
      Activity log
    
              Created suggestion
            
          5 months, 2 weeks ago
          
            ILIAS Certificate Import Remote Code Execution
          
      https://vuldb.com/?id.327229
    
    technical-descriptionvdb-entry
  
      https://vuldb.com/?ctiid.327229
    
    permissions-requiredsignature
  
      Submit #664889 | ILIAS open source e-Learning e. V. ILIAS >=8.0.0, <=10.1 Unrestricted Upload
    
    third-party-advisory
  
      https://docu.ilias.de/go/blog/15821/882
    
    related
  
      https://srlabs.de/blog/breaking-ilias-part-2-three-to-rce
    
    ILIAS

            ==8.19
          
            ==9.9
          
            ==8.3
          
            ==8.14
          
            ==9.6
          
            ==8.8
          
            ==9.0
          
            ==9.5
          
            ==9.10
          
            ==8.12
          
            ==8.18
          
            ==8.23
          
            ==9.1
          
            ==8.15
          
            ==8.13
          
            ==9.3
          
            ==9.12
          
            ==8.20
          
            ==8.6
          
            ==8.7
          
            ==9.11
          
            ==10.2
          
            ==9.7
          
            ==8.9
          
            ==8.10
          
            ==10.1
          
            ==9.14
          
            ==8.17
          
            ==9.13
          
            ==9.2
          
            ==8.16
          
            ==8.4
          
            ==8.1
          
            ==9.8
          
            ==8.0
          
            ==9.4
          
            ==8.22
          
            ==10.0
          
            ==8.24
          
            ==8.11
          
            ==8.5
          
            ==8.2
          
            ==8.21

Permalink CVE-2026-1364

9.8 CRITICAL

CVSS version (CVSS): 3.1
Attack Vector (AV): Network (N)
Attack Complexity (AC): Low (L)
Privileges Required (PR): None (N)
User Interaction (UI): None (N)
Scope (S): Unchanged (U)
Confidentiality (C): High (H)
Integrity (I): High (H)
Availability (A): High (H)
Modified Attack Vector (MAV): Network (N)
Modified Attack Complexity (MAC): Low (L)
Modified Privileges Required (MPR): None (N)
Modified User Interaction (MUI): None (N)
Modified Confidentiality (MC): High (H)
Modified Scope (MS): Unchanged (U)
Modified Integrity (MI): High (H)
Modified Availability (MA): High (H)

created 5 months, 2 weeks ago Activity log

Created suggestion 5 months, 2 weeks ago

JNC｜IAQS and I6 - Missing Authentication

https://www.twcert.org.tw/tw/cp-132-10652-4cdca-1.html third-party-advisory
https://www.twcert.org.tw/en/cp-139-10653-117a1-2.html third-party-advisory

IAQS

          Permalink
          
            CVE-2025-54876
          
              created
            
          5 months, 2 weeks ago
          
      Activity log
    
              Created suggestion
            
          5 months, 2 weeks ago
          
            Jans CLI stores plaintext passwords in the local cli_cmd.log file
          
      https://github.com/JanssenProject/jans/security/advisories/GHSA-2f4x-m695-jvp3
    
    x_refsource_CONFIRM
  
      https://github.com/JanssenProject/jans/pull/11903/commits/5260520e8d7ce1d1b8387c71b3571f20e643f110
    
    x_refsource_MISC
  
      https://github.com/JanssenProject/jans/discussions/11886
    
    x_refsource_MISC
  
      https://github.com/JanssenProject/jans/pull/11903
    
    x_refsource_MISC
  
      https://github.com/JanssenProject/jans/commit/3592837764fe48b956e3140ca17b8ef7cac00a47
    
    x_refsource_MISC
  
    jans

            ==< nightly