CVEs published by HackerOne

CVEs published by HackerOne (CVE Numbering Authority). 56 tracked.

• CVE-2023-27534 HIGH 8.8 UPGRADE MITIGATE A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be
• CVE-2023-28319 HIGH 7.5 UPGRADE UPGRADE A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH ser
• CVE-2023-22794 HIGH 8.8 UPGRADE A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments
• CVE-2023-27536 MEDIUM 5.9 UPGRADE MITIGATE An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse p
• CVE-2023-28321 MEDIUM 5.9 UPGRADE MITIGATE An improper certificate validation vulnerability exists in curl <v8.1.0 in the way it supports matching of wil
• CVE-2026-29198 CRITICAL 9.8 UPGRADE In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulne
• CVE-2022-43552 MEDIUM 5.9 UPGRADE UPGRADE A use after free vulnerability exists in curl <7.87.0
• CVE-2023-23916 MEDIUM 6.5 UPGRADE MITIGATE An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "ch
• CVE-2023-28320 MEDIUM 5.9 UPGRADE UPGRADE A denial of service vulnerability exists in curl <v8.1.0 in the way libcurl provides several different backend
• CVE-2023-27537 MEDIUM 5.9 DOWNGRADE MITIGATE A double free vulnerability exists in libcurl <8.0.0 when sharing HSTS data between separate "handles"
• CVE-2023-28322 LOW 3.7 UPGRADE MITIGATE An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might err
• CVE-2026-56846 HIGH 7.5 A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMemory and enable re
• CVE-2026-32995 HIGH 7.5 The Rocket.Chat DDP method autoTranslate.translateMessage in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5,
• CVE-2026-58042 MEDIUM 5.9 A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process When a DNS Response Contains More Than
• CVE-2026-58041 MEDIUM 5.3 A flaw in Node.js node:sqlite allows a stale StatementSyncIterator created through DatabaseSync#createTagStore
• CVE-2026-58044 LOW 3.7 A flaw in Node.js HTTP client can cause a request desynchronization for Node.js-based forwarding proxies that
• CVE-2026-58045 MEDIUM 6.2 A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger a reachable assertion in the synchrono
• CVE-2026-58039 LOW 3.3 A flaw in Node.js Permission Model enforcement allows process.report writes (and overwrites) files outside --a
• CVE-2026-58046 CRITICAL 9.9 Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform
• CVE-2026-58043 HIGH 8.4 UPGRADE A flaw in Node.js Permission Model enforcement can over-grant filesystem access across radix-tree prefix bound
• CVE-2026-58040 MEDIUM 6.3 An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification ac
• CVE-2026-32994 MEDIUM 5.3 The /api/v1/autotranslate.translateMessage endpoint in versions <8.5.0, <8.4.2, <8.3.4, <8.2.4, <8.1.5, <8.0.6
• CVE-2026-64635 MEDIUM 5.3 Improper handling of the returnUrl parameter in the Forgot Password function of Veeam Service Provider Console
• CVE-2026-56847 MEDIUM 6.1 UPGRADE A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Log
• CVE-2026-56850 MEDIUM 4.4 UPGRADE A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS
• CVE-2026-64633 CRITICAL 10.0 A vulnerability allowing remote unauthenticated code execution on the agent host.
• CVE-2026-58067 HIGH 8.7 A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to exhaust host memory
• CVE-2026-58073 CRITICAL 9.5 A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a manage
• CVE-2026-58072 CRITICAL 9.0 A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, whic
• CVE-2026-56848 HIGH 7.5 A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-entrantly while `nghttp2
• CVE-2026-58071 HIGH 8.2 A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to access the proxied a
• CVE-2026-58074 HIGH 8.6 A vulnerability allowing a high-privileged user to execute arbitrary code on the server.
• CVE-2026-64631 HIGH 8.6 A vulnerability allowing a low-privileged user to inject SQL and extract database contents.
• CVE-2026-64634 HIGH 8.4 A vulnerability allowing local privilege escalation to the Reporter service context.
• CVE-2026-64630 MEDIUM 5.3 A vulnerability allowing a low-privileged user to retrieve report data outside the scope of a shared report li
• CVE-2026-64639 CRITICAL 9.3 Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privilege
• CVE-2026-64637 CRITICAL 9.9 Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to
• CVE-2026-64636 HIGH 7.7 An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated u
• CVE-2026-47364 MEDIUM 6.5 In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the use
• CVE-2026-44964 MEDIUM 6.5 In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exp
• CVE-2026-47361 MEDIUM 6.4 In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no per
• CVE-2026-47363 MEDIUM 6.3 In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity
• CVE-2026-44965 MEDIUM 5.5 In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (I
• CVE-2026-47362 MEDIUM 4.6 In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sen
• CVE-2026-106069 HIGH 7.4 A flaw in Node.js TLS hostname verification can cause a server certificate to be validated against a different
• CVE-2026-105483 HIGH 7.4 A flaw in Node.js TLS hostname verification allows a certificate without a matching IP address SAN to authenti
• CVE-2026-105482 HIGH 7.4 A flaw in Node.js DNS resolution allows hostnames containing a NUL byte to be silently truncated by the dns.re
• CVE-2026-105481 MEDIUM 6.5 A flaw in Node.js HTTP Agent connection reuse can cause a client to accept as valid a response that was sent b
• CVE-2026-106072 MEDIUM 6.7 A flaw in Node.js TLS hostname verification allows a certificate with only a DNS SAN to authenticate an IP end
• CVE-2026-106074 MEDIUM 4.8 A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUI
• CVE-2026-106070 LOW 3.7 A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong to the requested entr
• CVE-2026-106071 LOW 3.6 A flaw in Node.js Permission Model filesystem enforcement can grant access to paths that do not match a wildca
• CVE-2026-106073 LOW 3.3 A flaw in Node.js Permission Model filesystem enforcement leaves `fs.realpathSync()` without the required read
• CVE-2026-87901 HIGH 8.3 Improper sanitization in the registration module allows reflected Cross-Site Scripting.
• CVE-2019-15598 CRITICAL 9.8 UPGRADE A Code Injection exists in treekill on Windows which allows a remote code execution when an attacker is able t
• CVE-2026-87902 HIGH 8.1 EXPLOITED UPGRADE WordPress Core Remote File Inclusion Vulnerability

← Back to latest CVEs