[ Vendor · 4 CVEs ]

jarun

CVEs affecting jarun published in the last 30 days, plus any jarun CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-121627 3 Nov 2026 CVSS 6.1 jarun bukubuku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that allows attackers to execute script…
CVE-2026-121548 3 Nov 2026 CVSS 7.8 jarun nnnJarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers to execute commands via crafted…
CVE-2026-121549 3 Nov 2026 CVSS 4.4 jarun nnnnnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite files by…
CVE-2026-121550 3 Nov 2026 CVSS 3.3 jarun nnnnnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main() accepts an existing…