387068 matches found
CVE-2026-65149
NVIDIA DALI contains a vulnerability where an attacker could cause an uncontrolled out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering...
CVE-2026-65141
NVIDIA Isaac Lab is affected by an eval injection vulnerability (CWE-95). An attacker could exploit this flaw to achieve code execution , information disclosure, data tampering, and denial of service. The vulnerability requires local access and user interaction , carrying a high severity score of...
CVE-2026-65141
NVIDIA Isaac Lab contains a vulnerability where an attacker could cause an eval injection. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service...
CVE-2026-90054
A flaw was found in the Linux kernel's Transmission Control Protocol TCP urgent data handling. When TCP retransmits multi-segment packets while in urgent mode, the urgent pointer urgptr is incorrectly copied across segments. This error causes the receiver to misinterpret the urgent data's positio...
x86/AMD: ineffectual Zenbleed workaround
ISSUE DESCRIPTION The workaround for XSA-433 Zenbleed, CVE-2023-20593 was later re-worked to better integrate with other manipulations of the same MSR. In this rework an inverted conditional was introduced, resulting in the workaround to not be applied when needed and vice versa. For more details...
WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by AndrewN in WordPress Plugin FluentCart versions = 1.7.1...
CVE-2026-109252
A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending truncated authentication data to a connecting client. During error handling of the incomplete response, the client attempts to access uninitialized memory, leading to an...
CVE-2026-89204
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized...
CVE-2026-44415
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in...
CVE-2025-68999-POC
CVE-2025-68999 Happy Addons for Elementor prepare, but then drops $entry-metakey straight into the SQL string without escaping: $records = " $duplicatedpostid, '$entry-metakey', '$value' "; // ... $wpdb-query $query ; Because metakey comes from the database, the code treats it as trusted. But...
CVE-2026-89204
A vulnerability exists in RUGGEDCOM CROSSBOW (all versions
CVE-2026-89204
A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to database queries used for subnet management. This could allow an authenticated attacker to read, modify, or delete subnet configurations, leading to unauthorized...
CVE-2026-63354
Affected devices fail to properly validate and sanitize visual marker data within imported CSV trace files before rendering it on the Trace page . This vulnerability allows an attacker to use social engineering to trick an authorized user with "Read diagnostics" rights into importing a malicious ...
CVE-2026-44415
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in...
CVE-2026-44415
Affected systems fail to properly restrict access to internal APIs and paths for authenticated users. This vulnerability, associated with CWE-35 (Path Traversal) , allows an authenticated remote attacker to access sensitive internal information. In a worst-case scenario, this access could be leve...
CVE-2026-106598
The ThemeGrill User Registration WordPress plugin (versions n/a through 5.2.8 ) is vulnerable to a Missing Authorization vulnerability. This flaw allows an attacker to Retrieve Embedded Sensitive Data . No specific technical root cause, exploit details, or remediation steps are provided in the do...
WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by sumayfe in WordPress Plugin User Registration versions = 5.2.8...
CVE-2026-108489
The Active Products Tables for WooCommerce plugin (by PluginUs.Net) versions up to and including 2.1.3 is vulnerable to an Insertion of Sensitive Information Into Sent Data vulnerability (CWE-201). This flaw allows for the retrieval of embedded sensitive data from the application. No specific rem...
WordPress Active Products Tables for WooCommerce plugin <= 2.1.3 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by hooman in WordPress Plugin Active Products Tables for WooCommerce versions = 2.1.3...