60391 matches found
UBUNTU-CVE-2026-3633
A flaw was found in libsoup. A remote attacker, by controlling the method parameter of the soupmessagenew function, could inject arbitrary headers and additional request data. This vulnerability, known as CRLF Carriage Return Line Feed injection, occurs because the method value is not properly...
EUVD-2026-12547
GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...
CVE-2026-4312
GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...
CVE-2026-4312
GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...
CVE-2026-4312 DrangSoft｜GCB/FCB Audit Software - Missing Authentication
GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...
CVE-2026-4312
Affected product: DrangSoft GCB/FCB Audit Software. Vulnerability: Missing Authentication, enabling unauthenticated remote attackers to directly access APIs and create a new administrative account. Impact/risks: High impact on confidentiality, integrity, and availability as per CVSS metrics (CRIT...
CVE-2026-4258
creationtimestamp| type| source ---|---|--- 2026-03-17 06:58:26+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mhafiegv5q2n 2026-03-17 07:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116243341600749603 2026-03-17 07:30:32+00:00| seen|...
CVE-2026-4276
creationtimestamp| type| source ---|---|--- 2026-03-17 03:00:09+00:00| seen| https://kb.cert.org/vuls/id/624941 2026-03-18 23:07:02+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhem37zmxp25...
CVE-2026-2713
creationtimestamp| type| source ---|---|--- 2026-03-17 03:00:00+00:00| seen| https://jvn.jp/en/jp/JVN96706146/ 2026-04-05 05:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mipxqj3g4f2q...
CVE-2026-33067
creationtimestamp| type| source ---|---|--- 2026-03-17 00:49:57+00:00| published-proof-of-concept| https://github.com/siyuan-note/siyuan/security/advisories/GHSA-mvpm-v6q4-m2pf 2026-03-20 10:09:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhibldx3oz27...
EUVD-2026-12522
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...
CVE-2026-4312: Missing Authentication for Critical Function
GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to create a new administrative account...
DrangSoft GCB/FCB Audit Software 访问控制错误漏洞
DrangSoft GCB/FCB Audit Software is a financial statement auditing software developed by DrangSoft Corporation in China. DrangSoft GCB/FCB Audit Software has a vulnerability related to access control. This vulnerability stems from the lack of authentication, which may allow unverified remote...
CVE-2026-21991
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...
DEBIAN-CVE-2026-21991
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...
CVE-2026-21991
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...
CVE-2026-21991
The CVE-2026-21991 issue affects the DTrace component dtprobed, specifically its handling of USDT probes, enabling arbitrary file creation through crafted provider names. Multiple connected advisories confirm dtprobed as the vulnerable element and describe the risk of code execution as a worst-ca...
CVE-2026-21991
A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names...
