|
1081
|
8.8 |
HIGH
Network
|
-
|
-
|
Incorrect Authorization vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Exploiting Incorrectly Conf…
|
CWE-863
Incorrect Authorization
|
CVE-2025-15023
|
2026-05-15 03:19 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1082
|
8.8 |
HIGH
Network
|
-
|
-
|
Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System …
|
CWE-94
Code Injection
|
CVE-2025-15024
|
2026-05-15 03:19 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1083
|
- |
|
-
|
-
|
CVAT is an open source interactive video and image annotation tool for computer vision. From 2.5.0 to 2.63.0, an attacker who is able to create or edit an annotation guide on a task is able to add ma…
|
CWE-80
Basic XSS
|
CVE-2026-44369
|
2026-05-15 03:19 |
2026-05-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1084
|
- |
|
-
|
-
|
Spring Cloud AWS simplifies using AWS managed services in a Spring and Spring Boot applications. From 3.0.0 to 4.0.1, pplications using Spring Cloud AWS SNS HTTP/HTTPS endpoint support (@Notification…
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2026-44308
|
2026-05-15 03:19 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1085
|
- |
|
-
|
-
|
Open OnDemand is an open-source high-performance computing portal. Prior to 4.0.11, 4.1.5, and 4.2.2, specially crafted filenames can execute javascript in the file browser This vulnerability is fixe…
|
CWE-79
Cross-site Scripting
|
CVE-2026-44371
|
2026-05-15 03:19 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1086
|
7.5 |
HIGH
Network
|
-
|
-
|
Nerdbank.MessagePack is a NativeAOT-compatible MessagePack serialization library. Prior to 1.1.62, Nerdbank.MessagePack contains an uncontrolled stack allocation vulnerability in DateTime decoding. A…
|
CWE-789
Memory Allocation with Excessive Size Value
|
CVE-2026-44375
|
2026-05-15 03:19 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1087
|
9.6 |
CRITICAL
Network
|
-
|
-
|
soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Last.fm and AdBlock support. Prior to 0.1.8, a track title containing an HTML payload executed locally in the Electron app…
|
CWE-20
CWE-79
CWE-94
CWE-862
Improper Input Validation
Cross-site Scripting
Code Injection
Missing Authorization
|
CVE-2026-44482
|
2026-05-15 03:19 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1088
|
7.4 |
HIGH
Network
|
-
|
-
|
Katalyst Koi is a framework for building Rails admin functionality. Prior to 4.20.0 and 5.6.0, admin session cookies were not invalidated when an admin user logged out. An attacker with access to a v…
|
CWE-613
Insufficient Session Expiration
|
CVE-2026-44511
|
2026-05-15 03:19 |
2026-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1089
|
8.8 |
HIGH
Network
|
arubanetworks
|
arubaos
sd-wan
|
Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remo…
|
CWE-77
Command Injection
|
CVE-2026-44867
|
2026-05-15 03:19 |
2026-05-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1090
|
6.5 |
MEDIUM
Network
|
open5gs
|
open5gs
|
A security vulnerability has been detected in Open5GS up to 2.7.7. The affected element is the function yuarel_parse in the library /lib/sbi/conv.c of the component NRF. Such manipulation of the argu…
|
CWE-404
Improper Resource Shutdown or Release
|
CVE-2026-8292
|
2026-05-15 03:19 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
