5091496 matches found
Exploit for Generation of Error Message Containing Sensitive Information in Apache Camel
camel-undertow Rest DSL muteException Stack-Trace Disclosure R...
MINI-3RC2-GQ7W-XVHG
Bulletin has no description...
MINI-9R94-J6Q4-485F
Bulletin has no description...
MINI-PMV6-JVCJ-256P
Bulletin has no description...
MINI-M6FV-P4XP-H2XP
Bulletin has no description...
CVE-2026-14551
The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...
CVE-2026-16473 Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame
A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory...
CVE-2026-16473 Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame
A flaw was found in the sbc library BlueZ SBC codec. An off-by-one error in the SBC frame decoder allows a crafted audio payload to trigger a one-byte heap out-of-bounds read. This could allow an adjacent attacker streaming Bluetooth audio to read a single byte of adjacent heap memory...
Exploit for Server-Side Request Forgery in Apache Camel
camel-iggy User-Header Injection Reproducer CVE-2026-55994...
EUVD-2026-47622
The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...
CVE-2026-14551 Local Privilege Escalation in servereye client (sensorhub)
The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...
CVE-2026-14551
The servereye client also known as sensorhub, technically ClientAgentContainerService versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privileged service SE3Recovery EmergencyRecoveryService.exe, running as SYSTEM, periodically monitors the directory...
EUVD-2026-47620
The Ultimate Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Navigation Menu Widget data-toggle-icon/data-close-icon Attributes in all versions up to, and including, 2.9.1 due to insufficient input sanitization and output escaping. This makes it possible...
EUVD-2026-47619
The Joomla extension JoomShopping is vulnerable to an reflected XSS vulnerability in the product frontend controller...
EUVD-2026-47621
Authorization bypass through User-Controlled key vulnerability in Universe Software Computer Marketing Trade and Industry Inc. Online Registration and Workflow Management System allows Exploiting Trust in Client. This issue affects Online Registration and Workflow Management System: through...
EUVD-2026-47617
The Joomla extension Events Booking prior version 5.0-5.8.1 did not properly verify that an actor is allowed to download invoice information...
EUVD-2026-47618
The Joomla extension Page Builder CK is vulnerable to an authenticated arbitrary file upload, leading to RCE...
EUVD-2026-47613
The Events Manager WordPress plugin before 7.3.7 does not safely handle booking-registration data on sites using No-User-Account Booking Mode: a booker-supplied registration field is stored as booking meta and later deserialized without restricting allowed classes, enabling PHP object injection...
EUVD-2026-47612
The Product Addons and Product Options With Custom Fields WordPress plugin before 1.6.15 does not restrict an unauthenticated file-upload endpoint and accepts SVG files that are stored and served inline, allowing an unauthenticated attacker to upload a malicious SVG whose embedded script executes...
EUVD-2026-47615
Supermicro SMC SMASH services contain an Arbitrary code execution issue in X14DBG-DAP and X14DBI. An authorized attacker can exploit SMASH’s input capability to compromise data integrity or launch a Denial-of-Service DoS attack against the BMC...