Security Operations
Threat Intelligence
❓
CVETitleSeverityCVSSVendor / ProductExploitationSources
CVE-2026-116167 CVE-2026-116167 - SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated /check-auth page tha MEDIUM 6.8 Unknown 1 Details
CVE-2026-116166 CVE-2026-116166 - SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS setting but never enforces it, so the kernel port kee MEDIUM 6.8 Unknown 1 Details
CVE-2026-116165 CVE-2026-116165 - Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4 contains a missing authorization vulnerability on MongoDB de INFORMATIONAL - Unknown 1 Details
CVE-2026-116164 CVE-2026-116164 - Parse Server before 8.6.100 and 9.0.0 before 9.10.4-alpha.3 does not reject reserved internal field names in client obje INFORMATIONAL - Unknown 1 Details
CVE-2026-116163 CVE-2026-116163 - Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass because the validateSetUp, HIGH 7.4 Unknown 1 Details
CVE-2026-116162 CVE-2026-116162 - Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request with master privileges when i INFORMATIONAL - Unknown 1 Details
CVE-2026-116161 CVE-2026-116161 - Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure vulnerability in LiveQuer INFORMATIONAL - Unknown 1 Details
CVE-2026-116145 CVE-2026-116145 - ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for t LOW 3.9 Unknown 1 Details
CVE-2026-116142 CVE-2026-116142 - ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond allocate LOW 3.3 Unknown 1 Details
CVE-2026-116139 CVE-2026-116139 - WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site scripting vulnerability that allows authenticated commenter MEDIUM 5.4 Unknown 1 Details
CVE-2026-116053 CVE-2026-116053 - A weakness has been identified in dbcli mycli up to 2.29.4/2.30.1. The impacted element is the function source_special_c MEDIUM 5.3 Unknown 1 Details
CVE-2026-116196 CVE-2026-116196 - github.com/rclone/rclone: rclone: Information disclosure via HTTP redirects in B2 backend MEDIUM 5.3 Red Hat Unknown 2 sources Details
CVE-2026-116195 CVE-2026-116195 - github.com/rclone/rclone: rclone: Path traversal via link suffix trimming MEDIUM 5.3 Red Hat Unknown 2 sources Details
CVE-2026-116194 CVE-2026-116194 - github.com/rclone/rclone: rclone: Sensitive data disclosure via CSRF in pCloud OAuth callback MEDIUM 6.8 Red Hat Unknown 2 sources Details
CVE-2026-116192 CVE-2026-116192 - github.com/rclone/rclone: rclone: Information disclosure via Server-Side Request Forgery in rc-serve MEDIUM 5.9 Red Hat Unknown 2 sources Details
CVE-2026-116191 CVE-2026-116191 - github.com/rclone/rclone: rclone: Arbitrary file modification via path traversal in WebDAV service HIGH 7.5 Red Hat Unknown 2 sources Details
CVE-2026-116190 CVE-2026-116190 - github.com/rclone/rclone: rclone: Information disclosure via cross-host HTTP redirects LOW 3.7 Red Hat Unknown 2 sources Details
CVE-2026-116189 CVE-2026-116189 - github.com/rclone/rclone: rclone: Arbitrary code execution via self-update signature verification bypass HIGH 7.5 Red Hat Unknown 2 sources Details
CVE-2026-116187 CVE-2026-116187 - github.com/rclone/rclone: rclone: Cross-tenant upload tampering via authorization bypass in S3 authentication proxy MEDIUM 5.0 Red Hat Unknown 2 sources Details
CVE-2026-116180 CVE-2026-116180 - vllm: vLLM: Denial of Service via uninitialized log probability tensors HIGH 6.5 Red Hat Unknown 2 sources Details