CVE Vulnerability Catalog

A vulnerability in the Perry library before version 0.5.1166 allows remote attackers to bypass JWT token expiration validation. This is caused by the unconditional setting of validate_exp = false in the verify_decode helper within the standard JWT verification path.

An authentication bypass security issue exists within FactoryTalk Historian Site Edition. By continually sending requests to the login endpoint, an attacker may obtain a valid authentication token.

Mitigation bypass in the DOM security component. This vulnerability was fixed in Firefox 152 and Thunderbird 152.

A vulnerability involving a mitigation bypass in the DOM security component. It was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

A vulnerability allowing same-origin policy bypass in the Networking: Cookies component. It was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

A sandbox escape vulnerability exists in the Networking component of Firefox and Thunderbird due to incorrect boundary conditions. This flaw was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

A sandbox escape vulnerability in the Security: Process Sandboxing component. The flaw was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

A sandbox escape vulnerability exists in the DOM: Navigation component of Firefox and Thunderbird. The flaw was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

A sandbox escape vulnerability exists in the DOM: Workers component of Firefox and Thunderbird. The flaw was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

A use-after-free vulnerability was found in the WebGPU component of Firefox and Thunderbird. The flaw was fixed in version 152 of both applications.

CVE-2026-40750 vulnerability in themagnifico52 Kids Online Store allows unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server.

Versions of GEO my WordPress up to 4.5.5 are vulnerable to unauthenticated SQL Injection.

CVE-2026-49774 describes an improper control of code generation vulnerability that allows remote code inclusion in the RD Station application. This issue affects RD Station versions from n/a through 5.6.0.

CVE-2026-49772 describes an improper neutralization of special elements used in SQL commands, allowing for Blind SQL Injection attacks in The Events Calendar application.

There is an unauthenticated SQL injection vulnerability in InPost Gallery versions up to 2.1.4.6.

The elixir-grpc library (grpc) contains deserialization of untrusted data and allocation of resources without limits or throttling vulnerabilities. An unauthenticated attacker can send a crafted payload with Content-Type: application/grpc+erlpack, causing atom table exhaustion and crashing the BEAM node, and in some cases achieving remote code execution. This affects versions from 0.4.0 before 1.0.0.

Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures, leading to private-key recovery. The first sign() on a Key object picks a nonce, and every later sign() on that same object reuses it, producing an identical 'r'.

In versions prior to 3.9.7, the i18next-http-middleware did not block dotted variants of keys such as '__proto__.polluted', leading to the potential for remote prototype pollution in applications using i18next-fs-backend version ≤ 2.6.5.

Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key strings, potentially allowing unauthorized writes to the global object prototype.

Socket versions before 2.041 for Perl have an out-of-bounds heap read issue. The pack_ip_mreq_source() function incorrectly checks the length of its source argument, leading to copying adjacent heap memory when the source is shorter than 4 bytes.