277163 matches found
UBUNTU-CVE-2026-7688
A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component Shipments API Endpoint. The manipulation of the argument fields leads to sql injection. The attack is possible to be...
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
...
BELL-CVE-2026-31690
Bulletin has no description...
BELL-CVE-2026-31653
Bulletin has no description...
BELL-CVE-2026-31654 CVE-2026-31654 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-31621 CVE-2026-31621 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-31608
Bulletin has no description...
BELL-CVE-2026-31564 CVE-2026-31564 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-31573 CVE-2026-31573 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-31569
Bulletin has no description...
BELL-CVE-2026-31553 CVE-2026-31553 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-31547 CVE-2026-31547 does not affect BellSoft software
Bulletin has no description...
Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2026-122-03)
The version of mozilla-thunderbird installed on the remote host is prior to 140.10.1esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-122-03 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...
CVE-2026-7643 ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy
A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This impacts an unknown function of the file Next.js of the component API Endpoint. Executing a manipulation can lead to permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The exploit has been...
CVE-2026-7629 kleneway awesome-cursor-mpc-server Ccode-Review Tool codeReview.ts runCodeReviewTool command injection
A flaw has been found in kleneway awesome-cursor-mpc-server up to 2.0.1. Impacted is the function runCodeReviewTool of the file src/tools/codeReview.ts of the component Ccode-Review Tool. Executing a manipulation can lead to command injection. The attack may be launched remotely. The exploit has...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Frangoteam Fuxa
CVE-2025-69985: FUXA ≤ 1.2.8 Authentication Bypass + RCE Explo...
RHSA-2026:12740 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
CVE-2026-7490
Sunnet CTMS and CPAS are affected by an Arbitrary File Upload vulnerability that can allow privileged remote attackers to upload and execute web shell backdoors, enabling arbitrary code execution on the server. The CVSS vectors indicate high severity (7.2/8.6) with network access, low attack comp...