|
1481
|
4.7 |
MEDIUM
Local
|
-
|
-
|
dhcpcd through 10.3.2, fixed in commit 78ea09e, contains a heap use-after-free vulnerability in the control socket handling within src/control.c that allows local unprivileged attackers to trigger me…
New
|
CWE-416
Use After Free
|
CVE-2026-56117
|
2026-06-25 00:16 |
2026-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1482
|
5.3 |
MEDIUM
Adjacent
|
-
|
-
|
dhcpcd through 10.3.2, fixed in commit 2f00c7b, contains a one-byte stack out-of-bounds write vulnerability in dhcp6_makemessage() in src/dhcp6.c that allows unauthenticated same-link attackers to wr…
New
|
CWE-787
Out-of-bounds Write
|
CVE-2026-56114
|
2026-06-25 00:16 |
2026-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1483
|
5.2 |
MEDIUM
Local
|
-
|
-
|
Deno is a JavaScript, TypeScript, and WebAssembly runtime. Prior to 2.8.1, when fetch() was called, Deno checked the destination hostname against --deny-net rules but did not re-check the IP addresse…
New
|
CWE-693
CWE-918
Protection Mechanism Failure
Server-Side Request Forgery (SSRF)
|
CVE-2026-49859
|
2026-06-25 00:16 |
2026-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1484
|
9.9 |
CRITICAL
Network
|
n8n
|
n8n
|
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could achieve global prototype pollution…
New
|
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
|
CVE-2026-44789
|
2026-06-25 00:16 |
2026-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1485
|
3.3 |
LOW
Local
|
imagemagick
|
imagemagick
|
ImageMagick before 7.1.2-15 and 6.9.13-40 contains a heap use-after-free in the meta coder: when memory allocation fails, a single byte is written to a stale pointer. Remote attackers can trigger it …
New
|
CWE-416
Use After Free
|
CVE-2026-56376
|
2026-06-24 23:41 |
2026-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1486
|
5.5 |
MEDIUM
Local
|
imagemagick
|
imagemagick
|
ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious S…
New
|
CWE-116
Improper Encoding or Escaping of Output
|
CVE-2026-56379
|
2026-06-24 23:37 |
2026-06-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1487
|
4.2 |
MEDIUM
Network
|
-
|
-
|
Daytona is a secure and elastic infrastructure runtime for AI-generated code execution and agent workflows. Prior to 0.186, a sandbox volume reference (volumeId, which may also be a volume name) was …
New
|
CWE-22
CWE-250
CWE-269
Path Traversal
Execution with Unnecessary Privileges
Improper Privilege Management
|
CVE-2026-54319
|
2026-06-24 23:17 |
2026-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1488
|
7.1 |
HIGH
Local
|
-
|
-
|
Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.5.3, the LocationSensorManager BroadcastReceiver is exported with no permission. Any in…
New
|
CWE-926
Improper Export of Android Application Components
|
CVE-2026-54318
|
2026-06-24 23:17 |
2026-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1489
|
- |
|
-
|
-
|
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
New
|
-
|
CVE-2026-29034
|
2026-06-24 23:17 |
2026-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
1490
|
9.9 |
CRITICAL
Network
|
n8n
|
n8n
|
n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, an authenticated user with permission to create or modify workflows could bypass the patch for CVE-2026-4223…
New
|
CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
|
CVE-2026-44791
|
2026-06-24 22:57 |
2026-06-24 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
