18353 matches found
CVE-2026-13476
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...
CVE-2026-13367 IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...
Security Bulletin: IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution (CVE-2026-13476)
Summary IBM Informix versions 12.10, 14.10 and 15.0 are vulnerable to an unauthenticated Remote Code Execution RCE vulnerability in the IBM Informix Wire Listener. Vulnerability Details CVEID:CVE-2026-13476 DESCRIPTION: IBM Informix could allow an unauthenticated user to execute arbitrary command...
CVE-2026-16977
The Form Maker by 10Web WordPress plugin before 1.15.45 does not properly parameterize a user-controlled value that is substituted into a dynamic SQL query built for a database-backed choice field, allowing subscriber-level users to perform second-order SQL injection...
CVE-2026-16977 Form Maker by 10Web < 1.15.45 - Subscriber+ SQL Injection via display_name
The Form Maker by 10Web WordPress plugin before 1.15.45 does not properly parameterize a user-controlled value that is substituted into a dynamic SQL query built for a database-backed choice field, allowing subscriber-level users to perform second-order SQL injection...
ROS-20260812-73-0006
The vulnerability of the XRDP server is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure or execute arbitrary code...
PT-2026-71016
The Form Maker by 10Web WordPress plugin before 1.15.45 does not properly parameterize a user-controlled value that is substituted into a dynamic SQL query built for a database-backed choice field, allowing subscriber-level users to perform second-order SQL injection...
CVE-2026-13367: Improper Access Control
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility...
The vulnerability of the Windows Device Association Service in Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the Windows Device Association Service on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the Remote Access Connection Manager (RASMan) service on Windows operating systems allows a hacker to increase their privileges.
The vulnerability of the Remote Access Connection Manager RASMan service is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Windows DNS service for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Windows DNS service for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to increase their privileges
The vulnerability of the HTTP.sys driver on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
ROS-20260812-73-0030
The vulnerability in Wireshark is related to overflowing of buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260812-73-0022
The vulnerability in Wireshark is related to overflowing of buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the DWM Core Library in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the DWM Core Library in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the zfs_ioc_userspace_many() function in the OpenZFS component of FreeBSD-based operating systems allows a attacker to increase their privileges.
The vulnerability of the zfsiocuserspacemany function in the OpenZFS component of FreeBSD operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to gain increased privileges...
ROS-20260812-73-0003
The vulnerability of the XRDP server is related to overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-13476: Improper Neutralization of Special Elements used in an OS Command
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input...
Linux Distros Unpatched Vulnerability : CVE-2026-68174
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix union collision of module and refcnt for dynamic events In 'struct traceeventcall', the 'module' pointer and the 'refcnt' atomic variable share the...