106907 matches found
CVE-2026-19996: Improper Privilege Management
A vulnerability was identified in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/customers of the component Backend Customer Behavior Data Endpoint. Such manipulation of the argument ID leads to improper privilege management. The attack can be executed...
Unity Linux 20.1070e Security Update: ghostscript (UTSA-2026-099527)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099527 advisory. A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function...
PT-2026-73180
A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes...
PT-2026-73181
A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save contact of the component Contact Information Update. Such manipulation of the argument contact id leads to authorization bypass. The attack can...
CVE-2026-19987: Exposure of Information Through Directory Listing
A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknown function of the file /assets/uploadImage/Profile/. Such manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely...
Important: rust-cargo-c
Issue Overview: libgit2 Submodule path traversal CVE-2026-53584 Unbounded Memory Allocation via Delta Object Result-Size Header CVE-2026-53585 libgit2 version 1.9.4 and below is vulnerable to a heap out-of-bounds read in setdata in src/libgit2/transports/smartpkt.c. The vulnerable code uses a...
ROS-20260817-73-0021
The vulnerability of the Microsoft .NET Framework software platform is related to the execution of operations outside the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260817-73-0002
The vulnerability of the Microsoft .NET Framework software platform is related to a violation of data protection mechanisms. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
ROS-20260817-73-0007
The vulnerability in dotnet8.0 is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260817-73-0211
The vulnerability in python-setuptools is related to incorrect data processing based on the Unicode encoding standard. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260817-73-0008
The vulnerability in dotnet9.0 is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-19992: Exposure of Sensitive Information to an Unauthorized Actor
A flaw has been found in Orange View Limited DualSafe Password Manager & Digital Vault Extension up to 1.4.35 on Chrome. Affected is an unknown function of the component postMessage-based Bridge. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. A...
CVE-2026-19983: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/glnassys of the component NAS Command Service. The manipulation results in os command injection. The attack may be launch...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100899)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100899 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3,...
CVE-2026-50773: Uncontrolled Search Path Element
An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file...
Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099482)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099482 advisory. An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not match Cache-Control respon...
Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099501)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099501 advisory. An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.utils.cache.hasvaryheader in Django does not strip leading or trailing whitespace fr...
The vulnerability of the EncryptInterceptor module in the Apache Tomcat application server allows a hacker to perform a replay attack.
The vulnerability of the EncryptInterceptor module in the Apache Tomcat application server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to carry out a replay attack...
CVE-2026-68005
A vulnerability exists in ACME mini_httpd 1.30 and prior versions that allows a remote attacker to cause a denial of service (DoS) . The root cause is located in the HTTP request header parser within the handle_request() function. While the vulnerability is confirmed across multiple sources, incl...