106973 matches found
Unity Linux 20.1070e Security Update: ghostscript (UTSA-2026-099527)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099527 advisory. A vulnerability was found in Artifex GhostPDL up to 3989415a5b8e99b9d1b87cc9902bde9b7cdea145. It has been classified as problematic. This affects the function...
CVE-2026-19980: Improper Control of Generation of Code
A security flaw has been discovered in GL.iNet A1300, AX1800, AXT1800, BE1400, BE3600, BE6500, BE9300, BE10000, E5800, MT2500, MT3000, MT3600BE, MT5000, MT6000, X2000, X3000 and XE3000 up to 4.8.x. Affected by this issue is the function ui.updatelangs of the component Language Update. Performing ...
Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099482)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099482 advisory. An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.middleware.cache.UpdateCacheMiddleware in Django does not match Cache-Control respon...
Unity Linux 20.1070e Security Update: python-django (UTSA-2026-099501)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099501 advisory. An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6. django.utils.cache.hasvaryheader in Django does not strip leading or trailing whitespace fr...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100899)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100899 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3,...
PT-2026-73180
A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes...
PT-2026-73181
A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save contact of the component Contact Information Update. Such manipulation of the argument contact id leads to authorization bypass. The attack can...
CVE-2026-19987: Exposure of Information Through Directory Listing
A security vulnerability has been detected in SourceCodester Best Employee Management System 1.0. This affects an unknown function of the file /assets/uploadImage/Profile/. Such manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely...
CVE-2026-50776
A Directory Traversal vulnerability exists in Pronis Loisirs Billetterie CSE -
Important: rust-cargo-c
Issue Overview: libgit2 Submodule path traversal CVE-2026-53584 Unbounded Memory Allocation via Delta Object Result-Size Header CVE-2026-53585 libgit2 version 1.9.4 and below is vulnerable to a heap out-of-bounds read in setdata in src/libgit2/transports/smartpkt.c. The vulnerable code uses a...
CVE-2026-19992: Exposure of Sensitive Information to an Unauthorized Actor
A flaw has been found in Orange View Limited DualSafe Password Manager & Digital Vault Extension up to 1.4.35 on Chrome. Affected is an unknown function of the component postMessage-based Bridge. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. A...
CVE-2026-19983: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/glnassys of the component NAS Command Service. The manipulation results in os command injection. The attack may be launch...
CVE-2026-50773: Uncontrolled Search Path Element
An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll file...
CVE-2026-68005
A vulnerability exists in ACME mini_httpd 1.30 and prior versions that allows a remote attacker to cause a denial of service (DoS) . The root cause is located in the HTTP request header parser within the handle_request() function. While the vulnerability is confirmed across multiple sources, incl...
ROS-20260817-73-0007
The vulnerability in dotnet8.0 is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
ROS-20260817-73-0021
The vulnerability of the Microsoft .NET Framework software platform is related to the execution of operations outside the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to cause service interruptions...
CVE-2026-19996: Improper Privilege Management
A vulnerability was identified in Webkul Bagisto up to 2.4.4. This vulnerability affects unknown code of the file /admin/customers of the component Backend Customer Behavior Data Endpoint. Such manipulation of the argument ID leads to improper privilege management. The attack can be executed...
CVE-2026-19975: Time-of-check Time-of-use (TOCTOU) Race Condition
A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component Money Transfer Handler. This manipulation causes time-of-check time-of-use. The attack may be initiated remotely. A hig...
The vulnerability of the EncryptInterceptor module in the Apache Tomcat application server allows a hacker to perform a replay attack.
The vulnerability of the EncryptInterceptor module in the Apache Tomcat application server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to carry out a replay attack...