14683 matches found
The vulnerability in the WebRTC component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to induce a service failure.
The vulnerability of the WebRTC component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird lies in the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
MAL-2026-10699 Malicious code in http-req-lite (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6fcf8bb9984d83b39b69d2dbe9e0e928c5eeab345a2fb05446ab0f6e5eb1a11d The OpenSSF Package Analysis project identified 'http-req-lite' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2023-49899
An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel...
CVE-2026-35146 HCL DFXServer is affected by an Unencrypted Communication vulnerability.
HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user...
CVE-2026-35146
HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user...
EUVD-2023-60601
An unauthenticated remote attacker can execute any command on the affected device due to not correctly verifying the origin of a communication channel...
EUVD-2026-44895
A local privilege escalation vulnerability in ESET Inspect Connector. The vulnerability was caused by improper authentication in an IPC channel...
CVE-2026-6423
CVE-2026-6423 concerns a local privilege escalation in the ESET Inspect Connector caused by improper authentication on an ALPC IPC channel. The CVSS 4.0 vector (AV:L/AC:L/PR:L/UI:N/ATT:N/VC:H/VI:H/SA:N/SI:N/VA:H) yields a base score of 8.5 (HIGH). Reported impact indicates elevated confidentialit...
CVE-2026-6423 Local privilege escalation via unauthenticated ALPC in ESET Inspect Connector
A local privilege escalation vulnerability in ESET Inspect Connector. The vulnerability was caused by improper authentication in an IPC channel...
CVE-2026-6423 Local privilege escalation via unauthenticated ALPC in ESET Inspect Connector
A local privilege escalation vulnerability in ESET Inspect Connector. The vulnerability was caused by improper authentication in an IPC channel...
ROS-20260716-73-0005
The vulnerability of Google Chrome’s WebRTC technology is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created web page...
CVE-2026-35146: Inadequate Encryption Strength
HCL DFXServer is affected by an Unencrypted Communication vulnerability. The application permits users to establish connections over unencrypted channels via the HTTP protocol, which could allow a remote attacker to intercept network traffic and expose sensitive data transmitted between the user...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the SslStream implementation. An attacker can bypass authorization checks during TLS/SSL communication by exploiting flaws in the processing of secure connections. This may allow access to protected...
PT-2026-60339
Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability...
PT-2026-60345
Name of the Vulnerable Software and Affected Versions Autel MaxiCharger AC Elite Home affected versions not specified Description A stack-based buffer overflow exists in the handling of card responses via the NFC interface. A physically present attacker can provide a crafted card response to...
Vulnerability of the WebRTC technology implementation: The networking capabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.
Vulnerability of WebRTC technology implementation: The networking of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relies on copying buffers without checking the size of input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...
CVE-2026-47472
NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service...
CVE-2026-47472
NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer (CVE-2026-47472). A local, same-user attacker could trigger deserialization, with potential impacts including code execution, information disclosure, data tampering, and denial of service. The NVIDIA security up...
EUVD-2026-44449
NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service...