67680 matches found
CVE-2026-20507
A use after free vulnerability exists in the Audio HAL component, which could lead to a local escalation of privilege . A malicious actor who has already obtained System privilege can exploit this flaw to increase their privileges further. The vulnerability does not require user interaction for e...
EUVD-2026-72192
A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/suptransac.php. Performing a manipulation of the argument companyname results in sql injection. It is possible to initiate the attack remotely...
EUVD-2026-72189
A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. This affects the function catchImage of the file backend/widgets/ueditor/Uploader.php of the component UEditor. The manipulation of the argument source results in server-side request forgery. The attack can be executed remotely...
CVE-2026-86239 liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload
A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...
CVE-2026-86239
liufee FeehiCMS (up to version 2.1.1 ) is affected by an unrestricted file upload vulnerability in the UEditor Widget component, specifically in the function UeditorAction::init within the file backend/widgets/ueditor/UeditorAction.php. The flaw allows remote, unauthenticated attackers to upload ...
CVE-2026-86239 liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload
A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...
EUVD-2026-72187
A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...
CVE-2026-86239 liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload
A vulnerability was identified in liufee FeehiCMS up to 2.1.1. The impacted element is the function UeditorAction::init of the file backend/widgets/ueditor/UeditorAction.php of the component UEditor Widget. The manipulation leads to unrestricted upload. Remote exploitation of the attack is...
EUVD-2026-72178
A security vulnerability has been detected in JeecgBoot up to 3.9.3. This vulnerability affects the function exportXls of the file jeecg-boot/jeecg-boot-module/jeecg-boot-module-airag/src/main/java/org/jeecg/modules/airag/llm/controller/AiragModelController.java. Such manipulation of the argument...
CVE-2026-86233
A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. Affected by this issue is some unknown functionality of the file /pages/usdel.php?type=user. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The...
ROS-20260907-73-0056
The vulnerability in Erlang is related to errors in the certificate verification process. Exploitation of this vulnerability can be carried out remotely...
ROS-20260907-73-0028
The vulnerability in perl-DBI is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
ROS-20260907-73-0054
The vulnerability in Erlang is related to errors in the certificate verification process. Exploitation of this vulnerability can be carried out remotely...
ROS-20260907-73-0095
The vulnerability in dotnet8.0 is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to send hidden HTTP requests remotely a type of HTTP request smuggling attack...
ROS-20260907-73-0042
The vulnerability in Erlang is related to incorrect input of configuration data. Exploitation of this vulnerability can be carried out remotely...
ROS-20260907-73-0508
The vulnerability in perl-Crypt-DSA is related to insufficient entropy. Exploitation of this vulnerability can be carried out remotely...
PT-2026-86632
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the...
PT-2026-86759
ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized...
PT-2026-86761
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access...
ROS-20260907-73-0065
The vulnerability of the NewKeyring function in the Go programming language is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...