372458 matches found
GNU C Library Looney Tunables Vulnerability
GNU C Library contains a heap based buffer overflow in the ld.so GLIBCTUNABLES environment variable parser that may allow local privilege escalation through SUID binaries...
PT-2026-117691
Name of the Vulnerable Software and Affected Versions IBM Storage TS4500 Library versions 1.1.1.6 through 1.12.0.3 Description IBM TS4500 Tape Library and Diamondback Tape Library fail to invalidate sessions properly. This flaw allows an authenticated user to impersonate another user on the syste...
PT-2026-117517
Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows cross-site request forgery CSRF against admin/modules/circulation/loan history maintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to reading beyond the allowed buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially crafted HTML page...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
PT-2026-117689
Name of the Vulnerable Software and Affected Versions IBM Storage TS4500 Library versions 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library affected versions not specified Description An authenticated user can trigger a denial of service by sending specially crafted SMTP requests. This action...
Skia graphics library DoS
The vulnerability in the Skia graphics library of Google Chrome and Microsoft Edge is related to memory usage after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...
CVE-2025-36252: Insufficient Session Expiration
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not invalidate session which could allow an authenticated user to impersonate another user on the system...
PT-2026-117452
SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAX lookup handler.php, admin/AJAX check id.php, admin/AJAX vocabolary control.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to...
PT-2026-117694
Name of the Vulnerable Software and Affected Versions IBM Storage TS4500 Library versions 1.1.1.6 through 1.12.0.3 Description A race condition exists that could allow a remote authenticated attacker to gain unauthorized administrative privileges. A race condition is a situation where the system'...
CVE-2026-107081: Undefined Security Weakness
SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...
CVE-2026-107084
Slims Senayan Library Management Systems 9 Bulian 9.8.0 allows cross-site request forgery CSRF against admin/modules/circulation/loanhistorymaintenance.php because the action=run GET parameter performs privileged, destructive operations with no CSRF token or POST confirmation, leading to data los...
CVE-2025-36061: Allocation of Resources Without Limits or Throttling
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could allow an authenticated user to cause a denial of service using specially crafted SMTP requests that would consume excessive amounts of system resources...
Senayan Library Management System SLiMS 9 Bulian security vulnerability
The Senayan Library Management System SLiMS version 9.8.0 contains a security vulnerability. This vulnerability stems from identifier injection in the tableName and tableFields POST parameters of the admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php,...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially crafted HTML page...
EUVD-2026-104452
SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...
CVE-2025-36069: Insufficient Session Expiration
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...
UBUNTU-CVE-2026-112112
An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject FlowSpec rules matching destinations outside the address space authorized by the unicast-route validation procedure. With validation enabled on the receiving flow6 channel, BIRD...