Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
23813
Total
1705
Critical
7468
High
7599
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-54399 | HIGH | 7.5 | Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause … | Jul 01, 2026 |
| CVE-2026-49088 | MEDIUM | 4.4 | Insertion of Sensitive Information into Log File (CWE-532) in Kibana can lead to information disclosure. When the optional application performance monitoring (APM) instrumentation is enabled, … | Jul 01, 2026 |
| CVE-2026-49087 | MEDIUM | 6.5 | Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can … | Jul 01, 2026 |
| CVE-2026-34117 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in text_to_subtitles.php (line 19) without sanitization: exec(\"php jobs/text_to_subtitles.php \".$login_session.\" \".$_GET['id'].\" ...\"). No … | Jul 01, 2026 |
| CVE-2026-34116 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe.php (line 15) without sanitization: exec(\"php jobs/transcribe.php \".$login_session.\" \".$_GET['id'].\" ...\"). No … | Jul 01, 2026 |
| CVE-2026-34115 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in transcribe_amazon.php (line 15) without sanitization: exec(\"php jobs/transcribe_amazon.php \".$login_session.\" \".$_GET['id'].\" ...\"). No … | Jul 01, 2026 |
| CVE-2026-34114 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate_text.php (line 18) without sanitization: exec(\"php jobs/translate_text.php \".$login_session.\" \".$_GET['id'].\" ...\"). No … | Jul 01, 2026 |
| CVE-2026-34113 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech_text.php (line 18) without sanitization: exec(\"php jobs/speech_audio_text.php \".$login_session.\" \".$_GET['id'].\" ...\"). No … | Jul 01, 2026 |
| CVE-2026-34112 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac.php (line 18) without sanitization: exec(\"php jobs/speech_audio_mac.php \".$login_session.\" \".$_GET['id'].\" ...\"). No … | Jul 01, 2026 |
| CVE-2026-34111 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speechmac_text.php (line 18) without sanitization: exec(\"php jobs/speech_audio_mac_text.php \".$login_session.\" \".$_GET['id'].\" ...\"). No … | Jul 01, 2026 |
| CVE-2026-34110 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in complex_start.php (line 14) without sanitization: exec(\"php jobs/complex.php \".$login_session.\" \".$_GET['id'].\" ...\"). No … | Jul 01, 2026 |
| CVE-2026-34109 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in speech.php (line 18) without sanitization: exec(\"php jobs/speech_audio.php \".$login_session.\" \".$_GET['id'].\" ...\"). No … | Jul 01, 2026 |
| CVE-2026-34108 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in text.php (line 15) without sanitization: exec(\"php jobs/text.php \".$login_session.\" \".$_GET['id'].\" ...\"). No … | Jul 01, 2026 |
| CVE-2026-34107 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in translate.php (line 14) without sanitization: exec(\"php jobs/translate.php \".$login_session.\" \".$_GET['id'].\" ...\"). No … | Jul 01, 2026 |
| CVE-2026-34106 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into a PHP exec() call in subtitles.php (line 19) without sanitization: exec(\"php jobs/subtitle_rendering.php \".$login_session.\" \".$_GET['id'].\" ...\"). No … | Jul 01, 2026 |
| CVE-2026-34105 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in translate_text.php (line 15): SELECT id, filename, extension, type FROM files where … | Jul 01, 2026 |
| CVE-2026-34104 | CRITICAL | 9.8 | Guardian language-system passes the name GET parameter directly into an unsanitized SQL query in designer.php (line 124): SELECT * FROM complex WHERE name='\".$_GET['name'].\"'. An authenticated … | Jul 01, 2026 |
| CVE-2026-34103 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in subtitles.php (line 16): SELECT id, filename, extension, type FROM files where … | Jul 01, 2026 |
| CVE-2026-34102 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_info_get.php (line 16): SELECT * FROM jobs where input1 = '\".$_GET['id'].\"'. … | Jul 01, 2026 |
| CVE-2026-34101 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in text_file.php (line 17): SELECT id, filename, extension, type, duration, owner, private … | Jul 01, 2026 |
| CVE-2026-34100 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in media.php (line 17): SELECT id, filename, extension, type, duration, owner, private … | Jul 01, 2026 |
| CVE-2026-34099 | CRITICAL | 9.8 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL query in job_info.php (line 16): SELECT * FROM jobs where id = '\".$_GET['id'].\"'. … | Jul 01, 2026 |
| CVE-2026-34098 | MEDIUM | 4.6 | Guardian language-system fails to sanitize the id GET parameter before inserting it into HTML source and form action attributes in media.php (lines 119, 129). An … | Jul 01, 2026 |
| CVE-2026-34097 | MEDIUM | 4.6 | Guardian language-system fails to sanitize the id GET parameter before inserting it into multiple HTML form action attributes in text_file.php (lines 94, 101, 323, 403, … | Jul 01, 2026 |
| CVE-2026-34096 | MEDIUM | 4.6 | Guardian language-system fails to sanitize the name GET parameter before outputting it into an HTML input value attribute in designer.php (line 57). An authenticated attacker … | Jul 01, 2026 |