CVE-2026-76656 HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerability

A vulnerability in HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service when traceroute is executed under certain conditions...

CVE-2026-77931 MoviePilot 3.1.5 Command Injection via ExecuteCommandTool

MoviePilot through 3.1.5 contains a command injection vulnerability that allows attackers to execute arbitrary OS commands by embedding malicious instructions in untrusted content processed through tools like browsewebpage, searchweb, and torrent metadata parsers, which then get passed to the...

CVE-2026-0993

SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP...

CVE-2026-110810

A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whispermodelload of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position...

CVE-2026-73799 HPE NonStop SNMP Trap Multiplexer - Memory Corruption vulnerability

A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption...

The vulnerability of the Windows Update Orchestrator Service on Windows operating systems allows a malicious individual to escalate their privileges.

The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of DesktopServicesHelper on macOS operating systems allows a hacker to increase their privileges.

The vulnerability of DesktopServicesHelper in macOS operating systems is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the platform for creating individual web applications in CRM. The leader involved in this issue faces unlimited distribution of resources, allowing attackers to compromise the accessibility of protected information.

The vulnerability of the platform for creating individual web applications in CRM involves unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the platform for creating individual web applications in CRM involves a lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the platform for creating individual web applications in CRM involves the failure to take measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the platform for creating individual web applications in CRM systems is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers, operating remotely, to circumvent existing security mechanisms and gain unauthorized access to...

The vulnerability of the Windows Update Orchestrator Service component on the Windows operating system allows a malicious individual to escalate their privileges and expose sensitive information.

The vulnerability of the Windows Update Orchestrator Service component relates to the improper handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to enhance their privileges and disclose sensitive information...

The vulnerability of the software interface (REST API) of the GEO.RITM software lies in the lack of authentication when accessing the function for retrieving object attributes. This allows attackers to gain unauthorized access to confidential information.

The vulnerability of the software interface REST API of the GEO.RITM software lies in the lack of authentication when accessing the function for retrieving object attributes. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential information...

The vulnerability of the avrcp_indicate_process_data_ind() function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC allows a hacker to induce a service failure.

The vulnerability of the avrcpindicateprocessdataind function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafte...

The vulnerability of the SBC_DecodeFrames() function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the SBCDecodeFrames function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failure...

The vulnerability of the l2caphandle_data() function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the l2caphandledata function in the microprogramming-based audio chipset of Bestechnic BES2300 Bluetooth Audio SoC is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to trigger a service failure by sending a specially...

The vulnerability of the btm_acl_handle() function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the btmaclhandle function in Bestechnic BES2300 Bluetooth Audio SoC microprogramming software is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to cause a service failure by sending a specially crafted L2CAP packet...

The vulnerability of the Windows Kernel component of the Windows operating system allows a hacker to execute arbitrary code or increase their privileges.

The vulnerability of the Windows kernel component of the operating system involves executing operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or enhance their privileges...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability in the kernel of operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS allows attackers to disclose protected information.

The vulnerability of the kernel in operating systems such as macOS, iOS, iPadOS, tvOS, watchOS, and visionOS is related to a kernel address leakage. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by the system’s security measures...