Linuxfabrik Monitoring Plugins: Sudoers may be able to obtain privilege escalation via /usr/bin/apt-get arguments

CVE-2026-52817

### Summary In the [Debian.sudoers](https://github.com/Linuxfabrik/monitoring-plugins/blob/main/assets/sudoers/Debian.su

历史摘要 · 未重新核验 · GitHub Advisory

Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles

CVE-2025-10996

### Summary A memory-safety vulnerability in Open Babel's SMILES parser caused a heap buffer overflow when reading a cr

历史摘要 · 未重新核验 · GitHub Advisory

Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow

CVE-2025-10995

### Summary A memory-safety vulnerability in Open Babel's bundled zipstream decompression code caused an out-of-bounds

历史摘要 · 未重新核验 · GitHub Advisory

Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule

CVE-2025-10994

### Summary A memory-safety vulnerability in Open Babel's GAMESS output parser caused a use-after-free when reading a c

历史摘要 · 未重新核验 · GitHub Advisory

Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence

CVE-2026-3408

### Summary A memory-safety vulnerability in Open Babel's CDXML file format parser caused a NULL pointer dereference wh

历史摘要 · 未重新核验 · GitHub Advisory

Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge

CVE-2026-2705

### Summary A memory-safety vulnerability in Open Babel's MOL2 file format parser caused a NULL pointer dereference whe

历史摘要 · 未重新核验 · GitHub Advisory

Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString

CVE-2026-2704

> ### Summary > > A memory-safety vulnerability in Open Babel's CIF file format parser > allowed an out-of-bounds read w

历史摘要 · 未重新核验 · GitHub Advisory

Lemur: ACME SSRF + creator-equality IDOR lead to AWS IAM/PKI compromise

CVE-2026-55166

Lemur 1.9.0: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme_url SSRF

历史摘要 · 未重新核验 · GitHub Advisory

Lemur: JWT verifier honors attacker-supplied alg, enabling ATO

CVE-2026-55165

Lemur 1.9.0: JWT verifier trusts attacker-supplied alg from token header — defense-in-depth gap; chain-dependent ATO wit

历史摘要 · 未重新核验 · GitHub Advisory

Lemur user-update path stores plaintext passwords

CVE-2026-55164

## Summary `lemur.users.service.update()` writes a user's new password as plaintext to the `users.password` column. The

历史摘要 · 未重新核验 · GitHub Advisory

Lemur Privilege Escalation: Non-admin role members can rewrite role membership via PUT /api/1/roles/<id>

CVE-2026-55163

## Summary The `PUT /api/1/roles/` handler in `lemur/roles/views.py` gates only on `RoleMemberPermission(role_id).can(

历史摘要 · 未重新核验 · GitHub Advisory

Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF

CVE-2026-55162

## Summary When verifying an uploaded certificate, `lemur/certificates/verify.py` extracts the CRL Distribution Point

历史摘要 · 未重新核验 · GitHub Advisory

Flask-Security has an Open Redirect issue

# Open Redirect in Flask-Security ## Summary `flask_security.utils.validate_redirect_url()` can allow an attacker-cont

历史摘要 · 未重新核验 · GitHub Advisory

zeroconf: Unvalidated rdlength in record payload readers allows LAN-local cache corruption via crafted mDNS packet

CVE-2026-48487

### Impact `_read_character_string` and `_read_string` in `src/zeroconf/_protocol/incoming.py` sliced `self.data[self.o

历史摘要 · 未重新核验 · GitHub Advisory

Glances: XML-RPC Server Missing Host Header Validation Enables DNS Rebinding Attack

CVE-2026-46611

### Summary The Glances XML-RPC server (`glances -s`, implemented in `glances/server.py`) does not validate the HTTP `H

历史摘要 · 未重新核验 · GitHub Advisory

Glances: XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard (Incomplete Fix for CVE-2026-33533)

CVE-2026-46608

### Summary The Glances XML-RPC server (`glances -s`) introduced a configurable CORS origin list in version 4.5.3 as a

历史摘要 · 未重新核验 · GitHub Advisory

Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution

CVE-2026-46607

### Summary `glances/outdated.py` uses `pickle.load()` to read a version-check cache file stored at a predictable, worl

历史摘要 · 未重新核验 · GitHub Advisory

Glances is Vulnerable to Command Injection via KVM/QEMU VM Domain Names in glances/plugins/vms/engines/virsh.py

CVE-2026-46606

### Summary The Glances KVM/QEMU monitoring engine (`glances/plugins/vms/engines/virsh.py`) passes VM domain names, rea

历史摘要 · 未重新核验 · GitHub Advisory

motionEye: Authentication possible via password hash

CVE-2026-46488

### Summary An authentication bypass vulnerability exists due to improper trust in client-controlled cookies. The applic

历史摘要 · 未重新核验 · GitHub Advisory

ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

CVE-2025-67303

### Impact An **Unprotected Alternate Channel (CWE-420)** vulnerability was discovered in ComfyUI-Manager versions prio

历史摘要 · 未重新核验 · GitHub Advisory