106971 matches found
CVE-2026-75090: Out-of-bounds Read
A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convertgguftohftokenizer of the file mistralrs-core/src/gguf/gguftokenizer.rs of the component GGUF Tokenizer. The manipulation of the argument eostokenid/bostokenid/unknowntokenid results...
PT-2026-77741
Name of the Vulnerable Software and Affected Versions Oracle Hyperion Financial Reporting version 11.2.25.0.000 Description A flaw in the Server component allows a low privileged attacker with network access via HTTPS to compromise the system. Successful exploitation can lead to a complete takeov...
CVE-2026-76036: Heap-based Buffer Overflow
Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...
PT-2026-76926
Name of the Vulnerable Software and Affected Versions karakeep-app karakeep versions prior to 0.32.0 Description An issue in the OAuth Sign-In component, specifically within a function in the apps/web/server/auth.ts file, allows for improper authentication. This flaw can be exploited remotely,...
PT-2026-76965
A vulnerability was identified in code-projects Task Management System 1.0. This affects the function Operation::select with multiple condition of the file /index.php of the component Login Form. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack...
PT-2026-76885
A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument first name/last name causes basic cross site scripting. It is possible to...
CVE-2026-30250
A Cross-site scripting (XSS) vulnerability exists in the user documentation field of Beta Systems Software AG ANOW! Automate v.3.3.1.90 . This flaw allows a remote attacker to achieve arbitrary code execution . While the vulnerability is identified, specific remediation steps or exploit links are...
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE lies in improper code generation management. This allows attackers to gain unauthorized access to protected information and execute arbitrary code.
The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE stems from improper code generation management. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information and execute arbitra...
CVE-2026-75087: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be...
CVE-2026-75089: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in PHPGurukul Complaint Management System 1.0. Affected by this issue is some unknown functionality of the file user/checkavailability.php. This manipulation of the argument email causes sql injection. Remote exploitation of the attack is possible. The exploit has...
CVE-2026-62623: Improper Access Control
Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware component: Security and Authentication. The supported version that is affected is 12.2.1.19.0. Easily exploitable vulnerability allows unauthenticated attacker with access to the physical communication segment...
CVE-2026-71675
An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngapsendtonas function in src/amf/ngap-path.c...
CVE-2026-19501: Improper Neutralization of Formula Elements in a CSV File
CSV export functionality in Brainstorm Force SureForms version, = 2.12.1, fails to neutralize spreadsheet formula characters in user-controlled form field names before generating CSV exports, which allows a remote attacker to execute spreadsheet formulas on an administrator's workstation when the...
CVE-2026-75088: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewbilling.php. Executing a manipulation of the argument delid can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and...
CVE-2026-71035: Improper Access Control
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce component: Forge. The supported version that is affected is 11.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...
PT-2026-77333
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.169 Description A buffer overflow exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms. This issue allows a remote attacker who has already...
PT-2026-77322
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.169 Description An inappropriate implementation in the Media component of Google Chrome on Mac allows a remote attacker to execute arbitrary code outside the sandbox. This is achieved by inducing the...
EUVD-2021-34863
An Authentication Bypass vulnerability exists in EPSON EH-TW5350 EPSON 150075647YWWV110, which could let a remote malicious user cause a Denial of Service via specially crafted series of HTTP...
PT-2026-77297
Improper handling of highly compressed data in the GZIP auto-decompression handler in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted compressed Ion document that expands to an arbitrarily large size upon decompression. To remediate this issue,...