66528 matches found
PT-2026-88338
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
EUVD-2026-72778
An issue in the btmaclhandle function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...
PT-2026-87185
A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15. The impacted element is the function uploadFile of the file controllers/pic.php. Such manipulation of the argument outerSrc/selectPhoto leads to cross site scripting. The attack may be performed from remote. The...
PT-2026-88319
A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function is within roots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name:...
CVE-2026-50349: Concurrent Execution using Shared Resource with Improper Synchronization
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...
CVE-2026-78624: Improper Limitation of a Pathname to a Restricted Directory
The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem...
CVE-2026-52486: Improper Verification of Cryptographic Signature
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
CVE-2026-70342: Use After Free
Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network...
PT-2026-87913
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally...
ROS-20260908-73-0043
The vulnerability in mongodb-org is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260908-73-0076
The vulnerability in mongodb-org is related to the lack of use of the assert function. Exploiting this vulnerability can allow a remote attacker to cause service failures...
CVE-2026-52486
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
Koha Eval Code Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 8081 by default. The issue results from the lack of proper...
PT-2026-88507
Impact The expression compiler's sanitizer resolved through a dynamically-scoped this, so a class field named sanitize rebound it and reached the Function constructor. On the backend, any expression author could run code in the n8n process; in the editor preview, a member's expression could run a...
PT-2026-87563
Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
EulerOS 2.0 SP12 : lxc (EulerOS-SA-2026-3282)
According to the versions of the lxc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : lxc is a Linux container runtime. In the setuid helper lxc-user-nic, the delete path contains a logic flaw in the findline function that allows an...
CVE-2026-52486
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
CVE-2026-52486
A vulnerability exists in OpenDDS 3.33.x that allows a local attacker to trigger a denial of service (DoS). The root cause is located in the verify function within the SIgnedDocument module . While the specific technical mechanism of the failure is not detailed in the provided documents, the impa...
PT-2026-88153
A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now publi...