262279 matches found
EUVD-2026-35382
A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 All versions, SIMATIC WinCC Unified PC Runtime V17 All versions, SIMATIC WinCC Unified PC Runtime V18 All versions, SIMATIC WinCC Unified PC Runtime V19 All versions, SIMATIC WinCC Unified PC Runtime V20 All versions,...
CVE-2026-24349
The CVE-2026-24349 entry affects SIMATIC WinCC Unified PC Runtime V16–V21 (all versions up to but not including V21 Update 2). The root cause is insufficient protection of key material in WinCC Certificate Manager, which could allow an attacker to extract sensitive information. All connected sour...
EUVD-2025-210083
A vulnerability has been identified in SIPROTEC 5 6MD84 CP300 All versions, SIPROTEC 5 6MD85 CP200 All versions, SIPROTEC 5 6MD85 CP300 All versions, SIPROTEC 5 6MD86 CP200 All versions, SIPROTEC 5 6MD86 CP300 All versions, SIPROTEC 5 6MD89 CP300 All versions, SIPROTEC 5 6MU85 CP300 All versions,...
CVE-2025-40808
The vulnerability CVE-2025-40808 affects SIPROTEC 5 line hardware (multiple models listed) where the affected application allows authenticated users to upload arbitrary files via the DIGSI 5 protocol. This could result in uploading malicious configuration files, potentially causing denial of serv...
CVE-2025-40808
A vulnerability has been identified in SIPROTEC 5 6MD84 CP300 All versions, SIPROTEC 5 6MD85 CP200 All versions, SIPROTEC 5 6MD85 CP300 All versions, SIPROTEC 5 6MD86 CP200 All versions, SIPROTEC 5 6MD86 CP300 All versions, SIPROTEC 5 6MD89 CP300 All versions, SIPROTEC 5 6MU85 CP300 All versions,...
CVE-2026-41981
Out-of-bounds write vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41982
Race condition vulnerability in the IPC module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-25688
creationtimestamp| type| source ---|---|--- 2026-06-09 07:52:02+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mntpnjicnn2x...
CVE-2026-25699 Apache Answer: Authorization Bypass in Timeline API
Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. Timeline-related APIs lacked proper authorization checks, allowing regular authenticated users to access deleted, private, or unapproved content and i...
EUVD-2026-35367
Improper Neutralization of Alternate XSS Syntax vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.0. AI-generated response content was rendered in the browser without proper sanitization, allowing malicious scripts to be executed when the content was viewed. Users are...
CVE-2026-25688
CVE-2026-25688 describes an XSS vulnerability in Apache Answer. The issue is an improper neutralization of alternate XSS syntax in AI-generated responses rendered in the browser, affecting Apache Answer up to version 2.0.0. Affected behavior allows execution of malicious scripts when content is v...
crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation
A flaw was found in Go's crypto/x509 package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service DoS for...
CVE-2026-8904
creationtimestamp| type| source ---|---|--- 2026-06-09 07:07:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mntn5ysy4q2v 2026-06-11 20:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mo225w5h2k26...
CVE-2026-41977
DoS vulnerability in the log service. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41976
Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-41973
Permission control vulnerability in calls. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-35359
Path traversal vulnerability in the SMS app. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-41986
Logic bypass vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability...
