CVE ID :CVE-2026-61524 Published : Aug. 3, 2026, 5:19 p.m. | 53 minutes ago Description :WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve remote code execution by uploading…
CVE ID :CVE-2026-61523 Published : Aug. 3, 2026, 5:18 p.m. | 54 minutes ago Description :WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content…
CVE ID :CVE-2026-68945 Published : Aug. 3, 2026, 5:16 p.m. | 56 minutes ago Description :Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated…
CVE ID :CVE-2026-69149 Published : Aug. 3, 2026, 5:16 p.m. | 56 minutes ago Description :Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2.19, and 22.0.7, a Cross-Site Scripting…
CVE ID :CVE-2026-65321 Published : Aug. 2, 2026, 3:16 p.m. | 4 hours, 49 minutes ago Description :PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes…
CVE ID :CVE-2026-68581 Published : Aug. 2, 2026, 1:16 p.m. | 6 hours, 49 minutes ago Description :Vikunja versions 0.22.0 through 2.3.0 fail to validate the principal type in API token management. Because user IDs and link-share IDs are independent numeric sequences…
CVE ID :CVE-2026-67356 Published : Aug. 2, 2026, 1:16 p.m. | 6 hours, 49 minutes ago Description :ArcadeDB before 26.7.3 binds the real LocalDatabase object into JavaScript trigger contexts with HostAccess.ALL, allowing schema-admins to call getSecurity().createUser() without permission checks. Attackers with UPDATE_SCHEMA…
CVE ID :CVE-2026-68579 Published : Aug. 2, 2026, 1:16 p.m. | 6 hours, 49 minutes ago Description :FreeRDP before 3.30.0 (<= 3.29.0) contains a heap-based buffer overflow in the Windows clipboard client’s CliprdrStream_Read function (client). When an OLE paste consumer (e.g. explorer.exe)…
CVE ID :CVE-2025-71399 Published : Aug. 2, 2026, 1:16 p.m. | 6 hours, 49 minutes ago Description :Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalized by removing empty segments, so /path,…
CVE ID :CVE-2026-55735 Published : Aug. 1, 2026, 7:16 p.m. | 43 minutes ago Description :Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticated attacker to revoke a victim’s session with a forged token. Guardian.revoke/3 in lib decodes the…