|
921
|
7.5 |
HIGH
Network
|
perl
|
dbi
|
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.
Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer wit…
New
|
CWE-787
Out-of-bounds Write
|
CVE-2026-9698
|
2026-06-10 02:20 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
922
|
9.8 |
CRITICAL
Network
|
-
|
-
|
YesWiki is a wiki system written in PHP. Prior to version 4.6.6, an unsafe execution vulnerability exists in the Bazar form field calculator (CalcField.php) of YesWiki. The application attempts to sa…
New
|
CWE-94 CWE-1333
Code Injection Inefficient Regular Expression Complexity
|
CVE-2026-52778
|
2026-06-10 02:17 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
923
|
6.5 |
MEDIUM
Network
|
-
|
-
|
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.
New
|
CWE-200
Information Exposure
|
CVE-2026-50508
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
924
|
8.8 |
HIGH
Network
|
-
|
-
|
Hermes WebUI before version 0.51.311 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by placing malicious executable Git configuration…
New
|
CWE-78
OS Command
|
CVE-2026-49959
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
925
|
5.0 |
MEDIUM
Local
|
-
|
-
|
Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the git_discard function within api/workspace_git.py that allows attackers to delete…
New
|
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
|
CVE-2026-49958
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
926
|
5.3 |
MEDIUM
Network
|
-
|
-
|
Hermes WebUI before version 0.51.270 contains a resource exhaustion vulnerability that allows unauthenticated remote attackers to degrade service availability by repeatedly calling the passkey option…
New
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2026-49955
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
927
|
6.5 |
MEDIUM
Network
|
-
|
-
|
The Apache Airflow Samba provider's `GCSToSambaOperator` joined GCS object names to the SMB destination path without a containment check, so an object named with `../` segments resolved a write path …
New
|
CWE-22
Path Traversal
|
CVE-2026-49818
|
2026-06-10 02:17 |
2026-06-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
928
|
7.8 |
HIGH
Local
|
-
|
-
|
Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally.
New
|
CWE-284
Improper Access Control
|
CVE-2026-49161
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
929
|
7.1 |
HIGH
Local
|
-
|
-
|
Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
New
|
CWE-20 CWE-23
Improper Input Validation Relative Path Traversal
|
CVE-2026-48569
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
930
|
7.8 |
HIGH
Local
|
-
|
-
|
Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
New
|
CWE-426
Untrusted Search Path
|
CVE-2026-48565
|
2026-06-10 02:17 |
2026-06-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|