jarun vulnerabilities
Every vulnerability this feed holds for jarun, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
4 vulnerabilities tracked.
- 8.4 Jarun nnn through 5.3 contains an OS command injection vulnerability in plugins/togglex that allows attackers to execute commands via…
- 5.3 buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that allows attackers to…
- 4.1 nnn through 5.3 contains an insecure temporary file vulnerability in the pdfread and nuke plugins that allows local attackers to overwrite…
- 1.0 nnn through 5.3 contains an insecure file handling vulnerability that allows local attackers to redirect writes because main() accepts an…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that jarun is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Red Hat Google n/a Apache Software Foundation Linux MediaTek, Inc. Apple FreeRDP Eclipse Foundation Gitea WAVLINK Dell vim vercel jpadilla Huawei Unknown Oracle Corporation py-pdf AM System WSO2 MONGODB Elastic