48297 matches found
CVE-2026-58235
CVE-2026-58235 affects SAP NetWeaver Application Server Java (Adobe Document Service). The issue arises from use of outdated third-party cryptographic and data transfer libraries that have known weaknesses and were addressed in later versions. A low-privileged authenticated attacker could potenti...
PT-2026-70501
Name of the Vulnerable Software and Affected Versions Windows Imaging Component affected versions not specified Description An authorized attacker can locally disclose sensitive information due to the use of an uninitialized resource in the Windows Imaging Component. This issue allows the attacke...
PT-2026-70922
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.137 Description A use-after-free issue exists in the HTML component, which allows a remote attacker to execute arbitrary code within a sandbox by inducing the user to open a specially crafted HTML pag...
Apache Tomcat 9.0.13 < 9.0.117 Insertion of Sensitive Information Vulnerability
The version of Tomcat installed on the remote host is 9.0.13 prior to 9.0.117. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.117security-9 advisory. - Insertion of Sensitive Information into Log File vulnerability in the cloud membership for clustering...
Linux Distros Unpatched Vulnerability : CVE-2026-68372
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: core: port: Deattach Type-C connector on component unbind connectorunbind is the mirror of connectorbind, but it is missing the symmetric call to...
PT-2026-70391
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Imaging Component during the parsing of ICC files. This out-of-bounds write allows an unauthorized attacker to execute code locall...
CVE-2026-48161
creationtimestamp| type| source ---|---|--- 2026-08-10 23:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msran7w43c2v 2026-08-11 00:00:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/117073932098519347 2026-08-11 00:00:37+00:00| seen|...
CVE-2026-72911
creationtimestamp| type| source ---|---|--- 2026-08-10 21:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqzwphlo425 2026-08-10 22:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msr3y6rwf324...
ECHO-0EA6-1C68-A084
Bulletin has no description...
CVE-2026-72743
SQLBot 1.10.0 contains a stored XSS in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. If an attacker can modify the dashboard text widget, they can inject arbitrary HTML/JavaScript that executes for all dashboard viewers. The issue is fixed in commit c...
CVE-2026-72743
SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inject arbitrary HTML and JavaScript that...
CVE-2026-72743 SQLBot 1.10.0 SQText Dashboard Component Stored XSS via v-html
SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization. Attackers who can modify dashboard text widget content can inject arbitrary HTML and JavaScript that...
GHSA-R28C-9Q8G-F849
creationtimestamp| type| source ---|---|--- 2026-08-10 19:39:38+00:00| seen| https://gist.github.com/klemmanton-lgtm/4a24aedae8017b5aebed0300d07c7ee9 2026-08-10 19:39:38+00:00| seen| https://gist.github.com/klemmanton-lgtm/8b54bdd2fe9905dc89b9c8ccf42f5fc4 2026-08-17 10:21:36+00:00| seen|...
CVE-2026-72864
creationtimestamp| type| source ---|---|--- 2026-08-10 19:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqtkshfew2z 2026-08-10 20:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msqvcczrjp2h 2026-08-11 23:01:36+00:00| seen|...
MINI-F625-8C3M-JCQ6
Bulletin has no description...
MINI-86MC-VV77-V6F2
Bulletin has no description...
MINI-8JVW-WGV3-HP5J
Bulletin has no description...
CVE-2026-16626
creationtimestamp| type| source ---|---|--- 2026-08-10 19:22:35+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqt4k3bcc2v...