77920 matches found
USN-8574-3: Linux kernel vulnerabilities
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. CVE-2025-54505 It was discovered that some AMD Zen 2 processors did not properly isolate shared...
Multiple vulnerabilities in ELECOM wireless LAN routers and access points (July 2026)
Overview Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Reflected cross-site scripting in WebUI CWE-79 - CVE-2026-44387 OS command injection in WebUI CWE-78 - CVE-2026-59764 OS command injection in Restore Settings CWE-78...
ligolo-ng v0.9
Ligolo-ng : Tunneling like a VPN An advanced, yet simple, tunneling tool that uses TUN interfaces. 📑 Ligolo-ng Documentation Setup/Quickstart !TIP Ligolo-ng 0.8 added a lot of new features, including: 🌐 API and a beautiful Web Interface thanks to L'ami du Raisin, allowing multiplayer! ⚙️ Simple...
CVE-2026-16423
A flaw was found in Google Chrome's user interface UI. A remote attacker could exploit this vulnerability by tricking a user into performing specific UI actions while viewing a specially designed web page. This could lead to heap corruption, potentially allowing the attacker to execute arbitrary...
EUVD-2025-210523
An issue was discovered in OpenSBI 1.3 allowing attackers to cause a denial of service via crafted request to the SBI function 2 or the 'Find and configure a matching counter' function of SBI PMU extension...
EUVD-2021-34855
An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. If a customer restricts access to the web console by IP address or subnets, the API endpoints are not restricted. If credentials/API keys are known to an attacker, the appliance can still be accessed via the API,...
CVE-2026-51254
CVE-2026-51254 is rejected/not used; this record does not represent an active vulnerability.
Windows Kernel Privilege Escalation
The vulnerability of the user interface kernel of the Windows operating system is related to errors in the mechanism for handling relative paths to directories. Exploiting this vulnerability can allow an attacker to increase their privileges...
Veeder-Root TLS4B Command Injection (CVE-2025-58428)
The TLS4B ATG system's SOAP-based interface is vulnerable due to its accessibility through the web services handler. This vulnerability enables remote attackers with valid credentials to execute system-level commands on the underlying Linux system. This could allow the attacker to achieve remote...
CVE-2026-51266
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51263
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
PT-2026-65420
ELECOM wireless LAN routers and access points devices contain a reflected cross-site scripting vulnerability in WebUI. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser...
PT-2026-65417
An unauthenticated remote attacker can abuse the improper validation of the post-login redirect of the web-UI to trick users to a malicious website. This can result in a loss of confidentiality and availability...
AT&T's Arris BGW210-700 gateway contains authentication bypass vulnerability in LAN-side management interface
Overview Firmware versions 2.7.7 and earlier of the Arris BGW210-700 residential gateway contain an authentication bypass vulnerability, tracked as CVE-2026-16771, that allows any unauthenticated LAN-side user to read sensitive configuration data and modify device settings through web management...
SUSE SLES15 Security Update : perl-DBI (SUSE-SU-2026:3283-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3283-1 advisory. This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package...
CentOS 9 : kernel-5.14.0-729.el9
The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the kernel-5.14.0-729.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: lib/buildid: use kernelread for sleepable context Prevent a BUG: unable to...
SUSE SLES16 Security Update : perl-DBI (SUSE-SU-2026:22845-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22845-1 advisory. - CVE-2026-15392: failure to validate symbolic links during table path resolution could allow unauthorized file reads and writes...
PT-2026-65421
ELECOM wireless LAN routers and access points devices contain an OS Command Injection vulnerability in WebUI. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...