387967 matches found
CVE-2026-110777
A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify...
CVE-2026-110777
A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify...
CVE-2026-76083 Redash: JSON data source query URL can bypass base URL restriction
Redash is a package for data visualization and sharing. From 10.0.0 until 26.9.0, the JSON data source query runner in redash/queryrunner/jsonds.py used getallresults to combine its configured baseurl with a user-supplied query URL by using urljoin. An absolute query URL replaced the configured...
CVE-2026-103946
An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus...
CVE-2026-101991
An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause heap data disclosure via a malformed UPDATE sent over a session with the traffic-engineering address...
CVE-2026-101936
A Reachable Assertion vulnerability in the srxpfe process of Juniper Networks Junos OS on SRX Series allows an adjacent network attacker to cause a denial of service of the data plane via malformed firewall-authentication synchronization traffic on chassis-cluster fabric interfaces...
CVE-2026-92154 F´: File size bounds bypass in Svc::FileUplink via unsigned integer overflow in DATA packet validation
F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::FileUplink handleDataPacket offset and size validation is vulnerable because the component checks byteOffset plus dataSize with wrapping U32 arithmetic a...
CVE-2026-101937
A Signed to Unsigned Conversion Error vulnerability exists in the srxpfe component of Juniper Networks Junos OS on the SRX Series . This flaw allows an adjacent attacker to trigger a denial of service (DoS) of the data plane by targeting chassis-cluster fabric traffic when chassis-cluster high av...
EUVD-2026-101451
An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause heap data disclosure via a malformed UPDATE sent over a session with the traffic-engineering address...
CVE-2026-101991 Junos OS and Junos OS Evolved: A BGP-LS peer causes heap data disclosure when traffic-engineering routing is enabled
An Improper Handling of Length Parameter Inconsistency vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP-LS peer to cause heap data disclosure via a malformed UPDATE sent over a session with the traffic-engineering address...
CVE-2026-101991
A vulnerability exists in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved . An Improper Handling of Length Parameter Inconsistency allows a configured BGP-LS peer to trigger heap data disclosure . This occurs when a malformed UPDATE message is sent over a sessi...
CVE-2026-103946 SQL Injection
An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus...
EUVD-2026-101441
An SQL injection vulnerability could allow an authenticated user to read or modify data stored by Nessus...
CVE-2026-103946
Tenable Nessus versions prior to 10.12.5 are affected by an SQL injection vulnerability (CVE-2026-103946 ). This flaw could allow an authenticated user to read or modify data stored within the Nessus application. The issue has been resolved in version 10.12.5 . While the vulnerability is confirme...
CVE-2026-110735
Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader core/io/resourceformatbinary.cpp, ResourceLoaderBinary::getunicodestring. A string length is read from the resource file into a signed 32-bit integer and compared against the destination buffer size with a...
pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular expressions
A flaw was found in PCRE2. An out-of-bounds write vulnerability exists in the pcre2dfamatch function due to improper size checking when reusing cached workspace blocks. A remote attacker could exploit this by providing a specially crafted regular expression or a recursive pattern in conjunction...
Linux Kernel Security Vulnerabilities
The Linux kernel version 2.6.27 contains a security vulnerability. This vulnerability arises from the ipv4 stack failing to verify the checksum before doing so. Packets with incorrect checksum metadata can cause skbchecksumhelp to corrupt network headers, potentially leading to privilege...
AZL-108458 CVE-2026-97629 affecting package nginx 1.30.4-1
Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared:name:size without an explicit sslsessionticketkey file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-determinist...
DEBIAN-CVE-2026-97629
Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared:name:size without an explicit sslsessionticketkey file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-determinist...
CVE-2026-97629
Description When NGINX Plus or NGINX Open Source is configured with sslsessioncache shared:name:size without an explicit sslsessionticketkey file directives to automatically rotate SSL session ticket keys, a remote unauthenticated attacker is able to forge client SSL sessions in a non-determinist...