232409 matches found
UBUNTU-CVE-2026-63650
OpenVPN 2.7alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field...
PT-2026-76804
Name of the Vulnerable Software and Affected Versions MemOS affected versions not specified Description In deployments where authentication is enabled via AUTH ENABLED=true but the INTERNAL SERVICE SECRET environment variable is not set, the is internal request function in...
PT-2026-76759
Name of the Vulnerable Software and Affected Versions TOTOLINK EX1200L version 9.3.5u.6146 B20201023 Description A remote attack can be initiated against the Password Configuration Handler component. The issue exists in the setPasswordCfg function within the '/cgi-bin/cstecgi.cgi' endpoint, where...
PT-2026-73317
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...
PT-2026-73328
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...
PT-2026-73352
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.1...
PT-2026-73360
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and...
PT-2026-73181
A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save contact of the component Contact Information Update. Such manipulation of the argument contact id leads to authorization bypass. The attack can...
Linux Distros Unpatched Vulnerability : CVE-2026-19969
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function...
PT-2026-73203
Name of the Vulnerable Software and Affected Versions jkawamoto mcp-florence2 versions prior to 0.3.14 Description A flaw in the get images function within the src/mcp florence2/ init .py file allows for server-side request forgery SSRF, a condition where an attacker can induce the server to make...
PT-2026-76882
Name of the Vulnerable Software and Affected Versions SourceCodester Class and Exam Timetabling System version 1.0 Description An issue exists in the /edit subject2.php file that allows remote attackers to perform SQL injection, a technique used to interfere with the queries that an application...
PT-2026-73187
A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph 3DGS MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bones num results in heap-based buffer...
PT-2026-73196
A vulnerability was detected in EFM ipTIME A3004T 14.19.0. The affected element is the function httpcon check session url of the component Session Validation. Performing a manipulation results in improper authentication. Remote exploitation of the attack is possible. The exploit is now public and...
PT-2026-73212
Name of the Vulnerable Software and Affected Versions Webkul Bagisto versions prior to 2.4.5 Description A remote attack is possible due to an issue in the RMA State Validation component. Manipulation of the /customer/account/rma/update-status endpoint leads to the enforcement of a behavioral...
PT-2026-73320
Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u491. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks require human...
PT-2026-73219
Name of the Vulnerable Software and Affected Versions code-projects Online Shopping System version 1.0 Description A remote cross site scripting issue exists in the offersmail.php file. This occurs when the email argument is manipulated, allowing an attacker to execute malicious scripts in the...
PT-2026-73194
A weakness has been identified in Azuriom CMS up to 1.2.12. This issue affects the function transferMoney of the file app/Http/Controllers/ProfileController.php of the component Money Transfer Handler. This manipulation causes time-of-check time-of-use. The attack may be initiated remotely. A hig...
PT-2026-73206
A vulnerability was detected in Alaev SEO Tools Extension up to 1.0.10 on Chrome. This impacts the function addDiv of the file src/popup.html of the component Popup UI. Performing a manipulation results in basic cross site scripting. The attack can be initiated remotely. The exploit is now public...
PT-2026-73216
A vulnerability was determined in Webkul Bagisto up to 2.4.4. This affects an unknown part of the file /customer/account/rma/send-message of the component RMA Message Handler. This manipulation of the argument Message causes cross site scripting. Remote exploitation of the attack is possible. The...
PT-2026-73213
A vulnerability was found in Webkul Bagisto up to 2.4.4. Affected by this issue is some unknown functionality of the file /admin/configuration/cache-management/execute of the component Configuration Management. The manipulation of the argument action results in authorization bypass. The attack ma...