77514 matches found
CVE-2026-78249
A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a...
CVE-2026-78249
A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers , including Apeos C4571 (version 1.1.3 and earlier) and Apeos C3567 (version 1.1.3). The root cause is the insecure handling of externally supplied parameters , which may allow a s...
EUVD-2026-90549
A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a...
CVE-2026-78249
A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a...
CVE-2026-80276
Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...
CVE-2026-80276 Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface
Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...
EUVD-2026-90503
Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...
CVE-2026-80276 Comelit 1456B gateway exposes remote configuration password via unauthenticated management interface
Comelit Multi-User Gateway for VIP System model 1456B firmware versions 2.9.1 and 2.10.0 expose a network-accessible management interface that does not require authentication. Through this interface, sensitive device configuration data - including the Remote Configuration Password - can be read i...
CVE-2026-14157
Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...
CVE-2026-14157
Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...
EUVD-2026-90453
Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...
CVE-2026-14157
Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...
CVE-2026-14157
A Use of an Externally Controlled Format String vulnerability exists in ASUS Router modules . A remote authenticated user can execute arbitrary commands by uploading a crafted file through the web management interface . No specific affected versions, root cause details, or remediation steps are p...
CLEANSTART-2026-KZ49511 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...
Security vulnerability affects the kube-state-metrics-fips package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memor...
PT-2026-104031
Name of the Vulnerable Software and Affected Versions Johnson Controls Neo Series MVP2 versions prior to 3.3b63 Description A vulnerability in the On-Chip Debug Interface allows the collection of data from common resource locations. Recommendations Update Johnson Controls Neo Series MVP2 to versi...
PT-2026-104038
Name of the Vulnerable Software and Affected Versions deeptutor version 1.4.0 Description A path traversal issue exists in the EditFileTool.execute function. A remote caller can use the live tutorbot WebSocket interface to force the tool layer to write or edit absolute paths outside the designate...
CVE-2026-51880
deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute. Through the live tutorbot WebSocket interface, a remote caller can induce the tool layer to write or edit absolute paths outside the intended bot workspace...
PT-2026-104021
Name of the Vulnerable Software and Affected Versions EasyIO FS32 versions prior to 3.3b63 Description An On-Chip Debug Interface issue in Johnson Controls EasyIO FS32 allows the collection of data from common resource locations, leading to information disclosure. Recommendations Update EasyIO FS...
CVE-2026-14157: Use of Externally-Controlled Format String
Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...
CVE-2026-34493: On-Chip Debug and Test Interface With Improper Access Control
On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63...