PT-2026-1780

Name of the Vulnerable Software and Affected Versions Sangfor Operation and Maintenance Management System versions up to 3.0.8 Description A security flaw exists in Sangfor Operation and Maintenance Management System. The issue involves unrestricted file upload due to manipulation of the File...

DEBIAN-CVE-2025-56225

fluidsynth-2.4.6 and earlier versions is vulnerable to Null pointer dereference in fluidsynthmonopoly.c, that can be triggered when loading an invalid midi file...

CVE-2023-45352

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This...

CVE-2023-45354

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated remote attacker to execute arbitrary code on the operating system by using the Common Management Portal web interface. This is also known as OCMP-6589...

CVE-2009-4327

The Common Code Infrastructure component in IBM DB2 9.5 before FP5 and 9.7 before FP1 does not properly validate the size of a memory pool during a creation attempt, which allows attackers to cause a denial of service memory consumption via unspecified vectors...

CVE-2023-50306

IBM Common Licensing 9.0 could allow a local user to enumerate usernames due to an observable response discrepancy. IBM X-Force ID: 273337...

CVE-2023-50945

IBM Common Licensing 9.0 stores user credentials in plain clear text which can be read by a local user...

CVE-2021-2167

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

CVE-2021-2115

Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite component: Tasks. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

CVE-2025-50334

creationtimestamp| type| source ---|---|--- 2026-01-08 16:42:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115860473488145891 2026-01-08 20:02:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbwrl2am6i2a...

CVE-2025-10569

creationtimestamp| type| source ---|---|--- 2026-01-08 14:15:13+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mbw66qsi4d2u 2026-01-09 11:04:06+00:00| seen| Telegram/IU-GZhw3lwdB2YPQBPPJszhGuDqQLNcVlkfgMniUsf5QLI 2026-01-09 13:16:41+00:00| seen|...

CVE-2025-69169

creationtimestamp| type| source ---|---|--- 2026-01-08 10:26:46+00:00| seen| https://gist.github.com/Darkcrai86/9069e8978daf1e2d78679525d48adbfa 2026-01-08 13:03:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbw26h2qjg2x...

CVE-2026-0697

The CVE-2026-0697 entry concerns code-projects Intern Membership Management System 1.0. A flaw in /intern/admin/edit_admin.php arises from manipulating the admin_id argument, causing an SQL injection vulnerability. The issue can be exploited remotely, and published exploits exist. Multiple connec...

ALSA-2026:0312 Moderate: cups security update

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: CUPS: Local denial-of-service via cupsd.conf update and related issues CVE-2025-61915 cups: Slow client communication leads to a possible DoS attack CVE-2025-584...

UBUNTU-CVE-2025-67859

Unknown description...

CVE-2026-21682

creationtimestamp| type| source ---|---|--- 2026-01-07 21:47:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbugyrfjog2e 2026-01-07 22:11:38+00:00| seen| Telegram/jO7QlYrwcf3hjfx3ScBgpS7153MfwFyypIrzpKferFw0p6I...

CVE-2025-14022

creationtimestamp| type| source ---|---|--- 2026-01-07 17:07:51+00:00| seen| Telegram/S7e73uQGRz2g4329uFgFshdmbcpucfN1UlxU6fp487LZwx8...

WordPress AA Block country plugin <= 1.0.1 - Unauthenticated IP Address Spoofing via X-Forwarded-For Header vulnerability

Unauthenticated IP Address Spoofing via X-Forwarded-For Header vulnerability discovered by Ivan Cese in WordPress Plugin AA Block country versions = 1.0.1...

CVE-1999-0014

Unauthorized privileged access or denial of service via dtappgather program in CDE...

CVE-2019-16204

Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d could expose external passwords, common secrets or authentication keys used between the switch and an external server...