3774 matches found
EUVD-2026-85932
A flaw has been found in DbGate up to 7.2.5-beta.5. This affects an unknown function of the file packages/api/src/controllers/runners.js of the component JSON Runner. Executing a manipulation of the argument comment.text/script.schedule can lead to code injection. The attack may be performed from...
CVE-2026-97225
A code injection vulnerability exists in DbGate versions up to 7.2.5-beta.5 within the JSON Runner component. The flaw resides in an unknown function of the file packages/api/src/controllers/runners.js, where manipulating the comment.text or script.schedule arguments can allow for remote code exe...
PT-2026-97915
Name of the Vulnerable Software and Affected Versions DbGate versions prior to 7.2.6 DbGate versions prior to 7.3.2-premium-beta.1 Description A path traversal issue exists in the files-style endpoint. Remote attackers can manipulate the filePath/uri argument used by the fs.readFile function with...
PT-2026-97916
Name of the Vulnerable Software and Affected Versions Norwegian Cruise Line door access controllers affected versions not specified Description An authentication bypass exists in RFID-based door access controllers where the system grants entry based solely on the static 7-byte UID of an NTAG212 N...
CVE-2026-97225: Improper Control of Generation of Code
A flaw has been found in DbGate up to 7.2.5-beta.5. This affects an unknown function of the file packages/api/src/controllers/runners.js of the component JSON Runner. Executing a manipulation of the argument comment.text/script.schedule can lead to code injection. The attack may be performed from...
ROS-20260923-73-0089
The vulnerability of the pinmuxfuncnametoselector function in the drivers/pinctrl/pinmux.c file, a driver for LINUX operating system GPIO controllers, is related to the lack of checking the return value. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
HPESBNW05137 rev.1 - Multiple Vulnerabilities in HPE Networking Analytics and Location Engine (ALE)
Potential Security Impact: Local: Access Restriction Bypass SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. ArubaOS Wi-Fi Controllers and Gateways ALE 5.0.0.0 and below CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-76708 |...
PT-2026-95907
Name of the Vulnerable Software and Affected Versions Pixelfed versions prior to 0.12.10 Description An issue exists in the OAuth Scope Handler component within the instancePeers function of the app/Http/Controllers/Api/ApiV1Controller.php file. Remote manipulation of the ID argument can lead to...
PT-2026-96005
Name of the Vulnerable Software and Affected Versions CodeAstro QR Code Attendance Management System version 1.0 Description Improper privilege management exists in the Save function within the app/Controllers/UserController.php file. A remote attacker can manipulate the role id argument to gain...
CVE-2026-94048: Improper Privilege Management
A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument roleid results in improper privilege management. The attack can be executed remotely. The exploit is...
PT-2026-95546
Name of the Vulnerable Software and Affected Versions LubeLogger versions prior to 1.6.8 Description Authenticated non-administrative users can access the HandleTranslationFileUpload endpoint and influence the filename passed from Controllers/FilesController.cs to the RenameFile function in...
PT-2026-95547
Name of the Vulnerable Software and Affected Versions LubeLogger versions prior to 1.6.8 Description An authenticated user can exploit a missing authorization check in the DuplicateRecordsToOtherVehicles endpoint. While the system verifies the destination vehicles, it fails to call the...
CVE-2026-54519: Missing Authorization
AI Agent Automation is a modular AI agent workflow automation platform with schedulers, tools, and observability. Prior to 0.9.1, backend/src/controllers/memory.controller.js authenticates requests but listMemories, deleteMemory, and clearAgentMemory use a caller-supplied agentId or memory id...
PT-2026-95148
Name of the Vulnerable Software and Affected Versions AI Agent Automation versions prior to 0.9.1 Description An issue exists in the backend/src/controllers/memory.controller.js file where requests are authenticated, but the listMemories, deleteMemory, and clearAgentMemory functions fail to verif...
EUVD-2026-78222
A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function construct of the file /application/controllers/admin/Dashboard.php of the component Admin Controllers. The manipulation leads to improper authentication. The attack can be initiated remotely...
CVE-2026-90840: Improper Authentication
A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function construct of the file /application/controllers/admin/Dashboard.php of the component Admin Controllers. The manipulation leads to improper authentication. The attack can be initiated remotely...
CVE-2026-90840
PHPGurukul Blood Donor Management System 1.0 is affected by an improper authentication vulnerability in the __construct function of /application/controllers/admin/Dashboard.php (Admin Controllers component). The flaw can be exploited remotely with no privileges required and no user interaction , ...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: drm/panel: ilitek-ili9881c: Fixed a warning related to GPIO controllers that need to sleep. The ilitek-ili9881c uses the non-sleeping gpiodsetvalue function to control the reset GPIO. This issue occurs when the GPIO controller...
Astra Linux – Vulnerability in Samba
A design flaw was identified in Samba’s DirSync control implementation, which exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers RODCs. This flaw allows RODCs and users with the GETCHANGES permission to access all attributes, including sensitive...
