CVE ID :CVE-2026-64832 Published : July 22, 2026, 6:17 p.m. | 1 hour, 33 minutes ago Description :FFmpeg versions 4.4 through 8.1.2 contain a double-free vulnerability in the NVIDIA NVDEC hardware decoder within libavcodec that allows attackers to trigger memory corruption by…
Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 (CVSS…
CVE ID :CVE-2026-65013 Published : July 22, 2026, 5:16 p.m. | 2 hours, 34 minutes ago Description :Onlook through 0.2.32, fixed in commit 423e2e9, contains a broken object level authorization vulnerability that allows authenticated attackers to access and manipulate other users’ resources…
CVE ID :CVE-2026-64877 Published : July 21, 2026, 7:17 p.m. | 26 minutes ago Description :An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database. Severity: 9.6…
CVE ID :CVE-2026-55082 Published : July 21, 2026, 7:17 p.m. | 26 minutes ago Description :DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. DHIS2 SQL View data endpoints allowed authenticated users with SQL View access…
CVE ID :CVE-2026-55084 Published : July 21, 2026, 7:17 p.m. | 26 minutes ago Description :DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. A SQL injection vulnerability was identified in the SqlView API endpoint of…
CVE ID :CVE-2016-20096 Published : July 21, 2026, 7:17 p.m. | 26 minutes ago Description :Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by manipulating the name…
CVE ID :CVE-2026-47418 Published : July 21, 2026, 6:17 p.m. | 1 hour, 26 minutes ago Description :PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The project CRUD…
CVE ID :CVE-2026-64619 Published : July 20, 2026, 7:17 p.m. | 17 minutes ago Description :FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that allows unauthenticated attackers to circumvent request throttling by supplying attacker-controlled X-Real-IP and X-Forwarded-For…
CVE ID :CVE-2026-63108 Published : July 20, 2026, 7:17 p.m. | 17 minutes ago Description :Roo Code through 3.54.0 contains a command injection vulnerability in the auto-approve execute feature that allows attackers to bypass allowlist/denylist enforcement by nesting command substitutions inside…