CVE ID :CVE-2026-65083 Published : Aug. 25, 2026, 8:15 p.m. | 32 minutes ago Description :NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of disallowed inputs. A successful exploit…
CVE ID :CVE-2026-80049 Published : Aug. 25, 2026, 6:23 p.m. | 24 minutes ago Description :Airbyte Platform resolves the workspace used for its authorization decision from a field the caller supplies. AuthorizationServerHandler copies recognised identifiers out of the raw JSON request…
CVE ID :CVE-2026-79787 Published : Aug. 25, 2026, 6:23 p.m. | 24 minutes ago Description :Alluxio’s S3 REST proxy fails to verify AWS Signature Version 4 signatures in its default configuration, allowing unauthenticated attackers to spoof user identity. Attackers can extract…
CVE ID :CVE-2026-76197 Published : Aug. 25, 2026, 6:18 p.m. | 29 minutes ago Description :Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability that could result in…
CVE ID :CVE-2026-76193 Published : Aug. 25, 2026, 6:18 p.m. | 29 minutes ago Description :Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current…
CVE ID :CVE-2026-76195 Published : Aug. 25, 2026, 6:18 p.m. | 29 minutes ago Description :Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command (‘OS Command Injection’) vulnerability that could result in…
CVE ID :CVE-2026-78555 Published : Aug. 24, 2026, 8:17 p.m. | 29 minutes ago Description :RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. Although the interface displayed only a shortened representation of each key,…
CVE ID :CVE-2026-78551 Published : Aug. 24, 2026, 8:17 p.m. | 29 minutes ago Description :RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid usernames, perform unrestricted password-guessing attacks, and potentially exhaust application…
CVE ID :CVE-2026-75542 Published : Aug. 24, 2026, 8:14 p.m. | 32 minutes ago Description :Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organization’s private packages. When…
CVE ID :CVE-2026-71506 Published : Aug. 24, 2026, 7:16 p.m. | 1 hour, 30 minutes ago Description :Dolibarr before 24.0.0 contains an improper authorization vulnerability in the payments REST API delete endpoint that allows authenticated attackers with invoice-deletion rights to permanently delete…