161130 matches found
EUVD-2026-92786
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...
CVE-2026-78860
The Mercusys AC12 V2 is affected by a vulnerability that allows a local attacker to achieve arbitrary code execution . The root cause is identified as the storage of information in plaintext , which is associated with CWE-311 (Missing Encryption of Sensitive Data) and CWE-347 (Improper Verificati...
CVE-2026-78860
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...
CVE-2026-100103: Use of Default Credentials
Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can obtain the highest application privilege, potentially leading to arbitrary code execution and compromise of the...
CVE-2026-19954
Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain for unicode domain names. pwhois encodes each non-ASCII label directly using Net::IDN::Punycode and prepends xn--. Apart from lowercasing ASCII and Cyrillic letters, it skips t...
PT-2026-104733
YAML versions before 1.27 001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts the name, so the target can be @INC or...
EUVD-2026-92441
Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local. This allows an attacker to execute arbitrary code...
PT-2026-106242
Name of the Vulnerable Software and Affected Versions AMD Versal™ Adaptive SoC affected versions not specified Description Insufficient boundary checks in USB boot mode, when enabled via board modifications, allow the use of crafted images to trigger a buffer overflow. This can overwrite an activ...
ROS-20261005-73-0090
The vulnerability in dotnet9.0 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20261005-73-0089
The vulnerability in dotnet10.0 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2019-25777: Improper Control of Dynamically-Identified Variables
YAML versions before 1.27001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts the name, so the target can be @INC or...
EUVD-2026-92785
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...
CVE-2026-78861
An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...
CVE-2026-78862
An issue in the Mercusys AC12 V2 hardware allows a local attacker to achieve arbitrary code execution . This vulnerability is triggered via the UART serial interface located on the device's printed circuit board (PCB) . No specific software versions, remediation steps, or exploit links are provid...
CVE-2026-37719
An issue in dormakaba evolo Service all versions allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component...
CVE-2026-12171: Inclusion of Functionality from Untrusted Control Sphere
auto-changelog before 2.6.1 merges configuration from inside the target repository the .auto-changelog file and the auto-changelog key in package.json into its options, and honors security-sensitive options from that untrusted source. The handlebarsSetup option is passed to require, so running...
CVE-2026-104809: External Control of File Name or Path
DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...
PT-2026-106196
Name of the Vulnerable Software and Affected Versions Ghost versions 6.10.3 through 6.63.0 Description An issue in the way the system loads theme translation files allows an authenticated Administrator to execute arbitrary code on the server by using a crafted theme. Recommendations Update to...
PT-2026-104752
Name of the Vulnerable Software and Affected Versions Perforce P4 Search versions prior to 2026.4.2 Description Container images reset the service authentication token to a publicly documented default value. An unauthenticated attacker with network access can use this to obtain the highest...
PT-2026-104774
DigitalCanion has discovered a vulnerability that allows an attacker to cause the system to load an attacker-controlled .so file instead of the expected legitimate module. The loading mechanism relies on a predictable module name without adequately verifying the file’s origin or integrity. A...