UBUNTU-CVE-2026-73585

A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creating a symlink in a world-writable directory, an attacker can redirect privileged writes to an arbitrary file during scri...

CVE-2026-19484

@fastify/busboy is a multipart form-data parser. In versions 3.1.0 through 3.2.0, a remote unauthenticated attacker can stall the Node.js event loop by sending a multipart request whose boundary is crafted to a specific length. The vendored streaming search stores its skip table in a fixed 256...

CVE-2026-19135

A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...

CVE-2026-19135

A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon. A low-privileged authenticated user can submit a crafted expression to the Measurements REST API that escapes the sandbox and loads arbitrary Java classes on the server. This can potentially allow an...

EUVD-2026-57713

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative...

Exploit for Use After Free in Microsoft

cve-id Donate Support the maintenance of this project wit...

umtx2

PS5 UMTX Jailbreak — etaHEN 2.3B Host del exploit UMTX2 p...

ROS-20260813-73-0054

The vulnerability in portainer-ce is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain increased privileges...

PT-2026-71869

Name of the Vulnerable Software and Affected Versions Tenda CH7 versions prior to 20260625 Tenda CH7G versions prior to 20260625 Tenda CH10 versions prior to 20260625 Tenda CP3 versions prior to 20260625 Tenda CP3 Pro versions prior to 20260625 Tenda CP7 versions prior to 20260625 Tenda TC3B14C...

PT-2026-71619

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges...

ROS-20260813-73-0008

The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2026-12072

Unknown description...

PT-2026-71893

Name of the Vulnerable Software and Affected Versions mcp-rdf-explorer version 1.0.0 Description A server-side request forgery SSRF issue exists in the MCP Server component within the explore url function of the src/mcp-rdf-explorer/server.py file. A remote attacker can trigger this by manipulati...

Linux Distros Unpatched Vulnerability : CVE-2026-70456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory b...

Linux Distros Unpatched Vulnerability : CVE-2022-4993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error...

PT-2026-71747

Name of the Vulnerable Software and Affected Versions Calix GigaSpire version 26.1.0 Description A flaw in the Web Management Interface component allows a remote attacker to cause a denial of service. This is achieved by manipulating the sessionKey argument within the 'utilities...

PT-2026-71927

Name of the Vulnerable Software and Affected Versions Dromara lamp-cloud versions prior to 5.10.1 Description A path traversal issue exists in the Code Generator component within the DefGenProjectController.java file. A remote attacker can exploit this by manipulating the outputDir, parent, or...

ROS-20260813-73-0036

The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...

Linux Distros Unpatched Vulnerability : CVE-2026-53793

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by...

PT-2026-71929

Name of the Vulnerable Software and Affected Versions dromara lamp-cloud versions prior to 5.10.1 Description A path traversal issue exists in the chunk-check endpoint within the FileChunkController.java file. A remote attacker can manipulate the Name argument to perform path traversal, which...