USN-8394-1: YARD vulnerability
It was discovered that YARD incorrectly sanitized paths in its built-in documentation server. An attacker could possibly use this issue to read arbitrary files from the server host.
VERWANDTEARTIKEL
CVE-2026-46400 - HAXCMS PHP has a File Upload Validation Bypass
2026-06-05
Mittel
CVE-2026-45779 - Open XDMoD Vulnerable to Unauthenticated SQL Injection Leading to Full Database Compromise
2026-06-05
Kritisch
CVE-2026-46398 - HAX CMS Missing Secure Flag on Cookie
2026-06-05
Mittel
CVE-2026-45758 - Malicious code in guardrails-ai 0.10.1 (supply chain compromise)
2026-06-05
Mittel
CVE-2026-45777 - Open XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injection
2026-06-05
Kritisch
CVE-2026-45778 - Open XDMoD Vulnerable to Reflected Cross-Site Scripting (XSS) in Password Reset
2026-06-05
Kritisch