|
4051
|
5.0 |
MEDIUM
Network
|
-
|
-
|
Local Deep Research is an AI-powered research assistant for deep, iterative research. Prior to 1.6.10, the URL checking logic in local-deep-research has a logical flaw that could be bypassed by attac…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-46526
|
2026-06-2 03:43 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4052
|
7.8 |
HIGH
Local
|
-
|
-
|
Roslyn CodeLens MCP Server is a Roslyn-based MCP server providing semantic code intelligence for .NET codebases. From 0.0.9 to 1.17.0, the get_diagnostics MCP tool loads and executes all DiagnosticAn…
|
CWE-94
Code Injection
|
CVE-2026-45555
|
2026-06-2 03:43 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4053
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Use after free in Accessibility in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a cr…
|
CWE-416
Use After Free
|
CVE-2026-9905
|
2026-06-2 03:43 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4054
|
4.3 |
MEDIUM
Network
|
google
|
chrome
|
Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
|
CWE-125
Out-of-bounds Read
|
CVE-2026-9943
|
2026-06-2 03:43 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4055
|
8.8 |
HIGH
Network
|
-
|
-
|
LibVNCClient is a library for easy implementation of a VNC client. In 0.9.15 and earlier, LibVNCClient's Tight encoding decoder uses fixed-size 2048-pixel scratch buffers for the Gradient filter, but…
|
CWE-787
Out-of-bounds Write
|
CVE-2026-44988
|
2026-06-2 03:42 |
2026-05-28 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4056
|
8.1 |
HIGH
Network
|
sangoma
|
freepbx
|
FreePBX is an open source IP PBX. Prior to 17.0.8, the FreePBX api module's OAuth2 implementation does not sufficiently validate client credentials during token issuance. Knowledge of a valid client_…
|
CWE-1390
Weak Authentication
|
CVE-2026-44237
|
2026-06-2 03:42 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4057
|
8.8 |
HIGH
Network
|
sangoma
|
freepbx
|
FreePBX is an open source IP PBX. Prior to 16.0.50 and 17.0.11, the CDR Reports module page allows SQL injection through the order and sort POST parameters. Authentication with a FreePBX Administrati…
|
CWE-89
SQL Injection
|
CVE-2026-44238
|
2026-06-2 03:41 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4058
|
8.8 |
HIGH
Network
|
sangoma
|
freepbx
|
FreePBX is an open source IP PBX. Prior to 16.0.22 and 17.0.5, the Dashboard module's getcontent AJAX handler includes PHP files based on user-supplied input without path sanitization. The $_REQUEST[…
|
CWE-98
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')
|
CVE-2026-44239
|
2026-06-2 03:41 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4059
|
9.8 |
CRITICAL
Network
|
-
|
-
|
Marten is a .NET Transactional Document DB and Event Store on PostgreSQL. Prior to 8.36.1, Marten's full-text search APIs interpolated the user-supplied regConfig parameter directly into the generate…
|
CWE-89
SQL Injection
|
CVE-2026-45288
|
2026-06-2 03:41 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
4060
|
7.3 |
HIGH
Network
|
-
|
-
|
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.4.17 and 1.5.0-beta.9, Better Auth's HTTP rate limiter keyed each request by the exact textual IP address it rece…
|
CWE-307
mproper Restriction of Excessive Authentication Attempts
|
CVE-2026-45364
|
2026-06-2 03:41 |
2026-05-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
