CVE Vulnerabilities - 9 July 2026

Langroid's TableChatAgent is vulnerable to a critical security flaw that allows attackers to execute unauthorized code on the host system. This means an attacker could potentially take control of the ...

An older version of Ruflo's default setup allowed anyone on the network to access sensitive data without a password. This could let them read important keys and interfere with Ruflo's learning pattern...

A security flaw in PostgreSQL's SQLChatAgent allows hackers to bypass safety checks and execute malicious queries. This can lead to unauthorized access to sensitive data. To fix this issue, update you...

A vulnerability in Neo4jChatAgent allows hackers to read or delete all data in a Neo4j database, or even execute system commands on the server, by manipulating the input to the database. This can happ...

A vulnerability in Palo Alto Networks PAN-OS software affects its Large Scale VPN feature. This means an attacker with access to your network could potentially steal or alter sensitive data. To stay s...

A security flaw in older versions of Hermes WebUI allows attackers to run commands on the server without a password. This can happen if a hacker sends four specific requests to the server. To fix this...

YesWiki's Bazar calculator in older versions can cause the server to crash or allow attackers to execute malicious code. This is a serious issue because it could lead to a denial of service or unautho...

An attacker can send a malicious request to the MERCURY MIPC252W's RTSP service, causing it to temporarily stop working for other users. This can happen without the attacker needing a password. To pro...

The Xerte Online Tools have a security flaw that allows attackers to run their own code on the server. This can happen if the server settings are misconfigured, allowing an attacker to change the path...

A security patch has been released for the rootio-varnish package on Root:Debian:11. If you're using an unpatched version, an attacker could potentially execute malicious code on your system remotely....

A security patch has been released for Apache Tomcat Catalina software, which could allow attackers to access your system without permission. If you're using this software, you should update to a patc...

Apache Tomcat Core has a security patch available to prevent remote attacks. If not updated, servers using this component may be vulnerable to unauthorized access. Update to the latest patched version...

A vulnerability in the Apache Tomcat web server allows an attacker to access sensitive data without permission. This affects users who run Apache Tomcat, and it's essential to update the software to a...

BiEticaret versions before 3.3.57 are vulnerable to a security risk that allows an attacker to manipulate data or access unauthorized information. This is a serious issue that can compromise the secur...

The Blocksy Companion plugin for WordPress has a security flaw that lets attackers upload files that could run malicious code. This is a concern because it could allow hackers to take control of a web...

Apache Tomcat's embedded core library has been patched to prevent a security risk that could allow an attacker to gain elevated access. This affects users of the library in Root's Maven repository. Us...

A security flaw in the miniOrange WordPress plugin allows hackers to take control of administrator accounts by bypassing the one-time password (OTP) verification process. This can happen if the plugin...

A security flaw in gpsd allows hackers to execute arbitrary commands on a system if they control the type of GPS device being used. This could lead to unauthorized access or data theft. To stay safe, ...

A security flaw in gpsd's gpsprof feature allows attackers to execute arbitrary commands on the system by manipulating the GPS device subtype value. This could potentially allow an attacker to take co...

A security weakness in PayRange 7.0.7 for Android allows attackers to inject malicious code on users' devices, potentially leading to unauthorized actions. This issue is particularly concerning when c...

Apache Tomcat's internal server is vulnerable to unauthorized access. This means an attacker could potentially access sensitive information or take control of your server. Update your Tomcat software ...

YesWiki's Bazar feature is vulnerable to a PHP object injection attack when importing entries. An attacker can inject malicious code by posting a specially crafted request to the BazarImportAction. To...

A lower-privilege administrator in XAPI can perform unauthorized actions, such as reading and modifying files, marking a VM as a system domain, or affecting storage connections. This can lead to unint...

XenServer's role-based access control has multiple issues that allow administrators with lower privileges to access and modify sensitive system settings. This could lead to unauthorized changes to the...

XenServer's role-based access control settings are not fully restricted, allowing lower-privileged administrators to make changes they shouldn't be able to. This could allow an unauthorized user to ac...