217672 matches found
CVE-2026-14168
A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access...
EUVD-2026-49731
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...
CVE-2026-14171
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...
CVE-2026-14171
CVE-2026-14171 affects ads-tec Industrial IT web UI via an unauthenticated remote attacker abusing improper validation of the post-login redirect. This open redirect could mislead users to a malicious site, with potential impacts to confidentiality and availability as described. Root cause: impro...
CVE-2026-14169
Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device...
CVE-2026-14169
Technical details are not publicly available in the provided documents. Monitor for updates.
EUVD-2026-49730
Due to incorrect behavior order a low privileged remote attacker could trigger account inconsistent state via crafted input and overwrites existing user passwords which could result in complete administrative unavailability of the device...
CVE-2026-14168
A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access...
EUVD-2026-49729
A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access...
CVE-2026-14168
The CVE CVE-2026-14168 affects ads-tec Industrial IT, with a root cause described as missing authorization at the insert path of the configuration table. This allows a low-privileged remote attacker to escalate to administrator privileges, resulting in full system access. The available documents ...
CVE-2026-14168 ads-tec Industrial IT: Vertical privilege escalation via configuration table write
A low privileged remote attacker can gain administrator privileges due to missing authorization at the insert path of the configuration table resulting in gaining full system access...
httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server
A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...
CVE-2026-14167 ads-tec Industrial IT: Privilege escalation during configuration import
A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization...
EUVD-2026-49728
A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization...
CVE-2026-64212
A flaw was found in the Linux kernel's iwlwifi driver. The iwlmldremovelink function does not properly check for a NULL pointer before dereferencing it. A local attacker could potentially exploit this null pointer dereference, leading to a system crash and a Denial of Service DoS...
CVE-2026-53666
A flaw was found in React Router. If an application is configured to allow attacker-supplied input to modify errors during server-side rendering SSR, a remote attacker could trigger unexpected code execution on the client. This execution could lead to an outbound network request, potentially...
CVE-2026-51298
A flaw was found in SQLite. A remote attacker could exploit a use-after-free vulnerability in the JSON extraction function. This occurs when the program attempts to access memory after it has been freed, specifically within the JsonParse object. Successful exploitation of this vulnerability can...
CVE-2026-55977
Successful exploitation of this vulnerability could allow an attacker with local network access to bypass the application's rate-limiting mechanism, enabling brute-forcing of the screen-sharing code and potentially displaying harmful content on the affected screen...
kernel: net: bridge: use a stable FDB dst snapshot in RCU readers
A flaw was found in the Linux kernel. Inconsistent handling of local Forwarding Database FDB entries in the bridge networking component's RCU Read-Copy-Update readers can lead to a null-pointer dereference. A local attacker could exploit this by triggering a concurrent update to an FDB entry,...
CVE-2026-50133
A flaw was found in Hugo, a static site generator. This vulnerability allows a remote attacker to perform stored cross-site scripting XSS by ingesting untrusted HTML content files. When a site processes these malicious files, the embedded script is executed verbatim in the rendered page,...