88403 matches found
PT-2026-88220
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the btm sec encrypt change function within btm sec.cc allows for a downgrade attack. This issue enables remote information disclosure without...
CVE-2026-28660: Protection Mechanism Failure
In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87466
Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...
AlmaLinux 8 : xmlrpc-c (ALSA-2026:64772)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:64772 advisory. xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVE-2026-15928 Tenable has extracted the preceding description block directly from the...
Linux Distros Unpatched Vulnerability : CVE-2026-85485
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3...
PT-2026-88452
HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0.410000, the fix for CVE-2026-19872, escaped the equivalent...
PT-2026-88228
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the getAllSessions function across multiple files creates a confused deputy scenario. This issue allows for local information disclosure without...
PT-2026-87202
Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An origin validation error allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no information about a newer version that contains a fi...
PT-2026-87232
Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An authorized attacker can disclose sensitive information over a network due to the generation of error messages that contain sensitive data. Recommendations At the moment, there is no...
CVE-2026-83996: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
Important: xmlrpc-c security update
XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC remote procedure call over the Internet. It converts an RPC into an XML document,...
Security update for bzip2 (low)
openSUSE security update: security update for bzip2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21762-1 Rating: low References: bsc1266786 Cross-References: CVE-2026-42250 CVSS scores: CVE-2026-42250 SUSE : 3.3...
PT-2026-87464
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-88337
HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages, no...
CVE-2026-28599: Protection Mechanism Failure
In addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-28655: Protection Mechanism Failure
In multiple functions of RemoteViews.java, there is a possible background activity launch bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87308
Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow is a...
ROS-20260908-73-0045
The vulnerability in nvidia-kmod is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...