|
3461
|
3.1 |
LOW
Network
|
-
|
-
|
TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the bot engine's the findResult query does not filter results by typebotId, allowing an authenticated user to load result data (user a…
|
CWE-639
CWE-862
Authorization Bypass Through User-Controlled Key
Missing Authorization
|
CVE-2026-39967
|
2026-05-27 05:16 |
2026-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3462
|
- |
|
-
|
-
|
A cross-site scripting vulnerability exists in Aterm. Arbitrary scripts may be executed in the web browser of a user accessing the web management interface via adjacent network.
|
CWE-79
Cross-site Scripting
|
CVE-2026-6059
|
2026-05-27 05:14 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3463
|
- |
|
-
|
-
|
An OS Command Injection vulnerability exists in Aterm. If a malicious third person gains administrator access to the product’s web console, they may be able to execute arbitrary OS commands via adjac…
|
CWE-78
OS Command
|
CVE-2026-8652
|
2026-05-27 05:14 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3464
|
8.5 |
HIGH
Network
|
-
|
-
|
A vulnerability in the `GitHubRepository` block of the `prefect-github` integration in Prefect version 3.6.18 allows an attacker to inject arbitrary git command-line options via the `reference` field…
|
CWE-88
Argument Injection
|
CVE-2026-3515
|
2026-05-27 05:06 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3465
|
7.8 |
HIGH
Local
|
-
|
-
|
A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious `config…
|
CWE-1066
Missing Serialization Control Element
|
CVE-2026-4372
|
2026-05-27 05:06 |
2026-05-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3466
|
- |
|
-
|
-
|
This vulnerability exists in CP Plus Wi-Fi Camera due to improper protection of sensitive information in runtime memory. An attacker with physical access could exploit this vulnerability by accessing…
|
CWE-312
Cleartext Storage of Sensitive Information
|
CVE-2026-9274
|
2026-05-27 05:04 |
2026-05-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3467
|
5.4 |
MEDIUM
Network
|
-
|
-
|
JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through 5.4.4, XSRF protection (updated in 4.1.0) inappropriately treated requests with…
|
CWE-352
Origin Validation Error
|
CVE-2026-40864
|
2026-05-27 05:03 |
2026-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3468
|
7.1 |
HIGH
Network
|
-
|
-
|
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 through 6.0.2 contain a Cross-Site Request Forgery (CSRF) vulnerability. An attacker who can induce a logged-in…
|
CWE-352
Origin Validation Error
|
CVE-2026-41074
|
2026-05-27 05:03 |
2026-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3469
|
8.8 |
HIGH
Network
|
-
|
-
|
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.0 through 5.0.9 and 6.0.0 through 6.0.2 contain an SQL injection vulnerability. An authenticated user can craft i…
|
CWE-89
SQL Injection
|
CVE-2026-41075
|
2026-05-27 05:03 |
2026-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
3470
|
4.6 |
MEDIUM
Network
|
-
|
-
|
RT is an open source, enterprise-grade issue and ticket tracking system. Versions prior to 5.0.10 and 6.0.0 through 6.0.2 contain a spreadsheet (CSV/formula) injection vulnerability. User-controlled …
|
CWE-1236
Improper Neutralization of Formula Elements in a CSV File
|
CVE-2026-41073
|
2026-05-27 05:03 |
2026-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
