227608 matches found
CVE-2026-38766
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the sub186f4 function...
PT-2026-63387
Name of the Vulnerable Software and Affected Versions NLnet Labs Unbound versions 1.6.0 through 1.25.1 Description The view local data and view local datas commands of unbound-control create a bare local zones tree for a configured named view that initially contains no local data. This process...
PT-2026-63471
Name of the Vulnerable Software and Affected Versions MongoDB affected versions not specified Description When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured tlsCATrusts allow-list. This failure in...
CVE-2026-38765
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...
PT-2026-63440
Name of the Vulnerable Software and Affected Versions Duplicati version 2.3.0.1 Description Incorrect permission assignments allow authenticated users to have MODIFY permissions that propagate to all subdirectories. When the software is installed outside the default Program Files directory or on ...
PT-2026-63511
Name of the Vulnerable Software and Affected Versions danger danger-js versions prior to 13.0.8 Description An OS command injection issue exists in the CLI component within the danger.git.diffForFile function located in the source/platforms/git/localGetFileAtSHA.ts file. This occurs when the File...
PT-2026-63274
A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underlying operating system...
PT-2026-63426
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the REST API. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...
PT-2026-63514
Name of the Vulnerable Software and Affected Versions Protegent 360 version 2.0.0.4 Description A local attacker can escalate privileges through the pgsecdl.sys kernel driver. A kernel driver is a program that allows the operating system to communicate with hardware or perform low-level system...
PT-2026-63515
Name of the Vulnerable Software and Affected Versions Protegent 360 version 2.0.0.4 Description A local attacker can escalate privileges through the sub 186f4 function. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
CVE-2026-38763
CVE-2026-38763 affects Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4. The vulnerability arises in the function sub_13828, enabling a local attacker to cause a denial of service. Exploitation would be local with low attacker complexity and low privileges required; no user interaction is needed,...
PT-2026-63513
Name of the Vulnerable Software and Affected Versions Protegent 360 version 2.0.0.4 Description A local attacker can cause a denial of service through the sub 13828 function. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
Local Privilege escalation vulnerability in Analog Way Picturall Quad Compact Mark II version 3.5.8
Overview Version 3.5.8 of Analog Way's Picturall Quad Compact Mark II server contains a local privilege escalation vulnerability, tracked as CVE-2026-14985, due to improper privilege delegation and insufficient input validation in a maintenance script. Description The Picturall Quad Compact Mark ...
CVE-2026-63987
A flaw was found in the Linux kernel's ethtool subsystem. The ethnlupdateprofile function, responsible for updating profile settings, does not properly validate user-controlled input when processing Netlink nest lists. This allows a local attacker to cause an out-of-bounds write, potentially...
XML External Entity (XXE) Injection
Overview Affected versions of this package are vulnerable to XML External Entity XXE Injection in the XmlDecoder file when XML input containing a DOCTYPE declaration is processed by an AsyncXMLInputFactory without security configuration, leaving DTD and entity handling enabled. An attacker can...
CVE-2026-16489
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function execCommand in the library lib/registry/sfdx.js of the component SFDX Connection Registry. The manipulation leads to os command injection. The attack can only be performed from a local environment. The exploi...
CVE-2026-16489 jsforce SFDX Connection Registry sfdx.js _execCommand os command injection
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function execCommand in the library lib/registry/sfdx.js of the component SFDX Connection Registry. The manipulation leads to os command injection. The attack can only be performed from a local environment. The exploi...
CVE-2026-16489
CVE-2026-16489 affects jsforce up to 3.10.16 in the SFDX Connection Registry. The vulnerability targets the function _execCommand within lib/registry/sfdx.js, enabling OS command injection from a local environment. An exploit is publicly available; the issue was reported early but no remediation ...
CVE-2026-16489 jsforce SFDX Connection Registry sfdx.js _execCommand os command injection
A vulnerability was identified in jsforce up to 3.10.16. This issue affects the function execCommand in the library lib/registry/sfdx.js of the component SFDX Connection Registry. The manipulation leads to os command injection. The attack can only be performed from a local environment. The exploi...
DEBIAN-CVE-2026-16414
Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local attacker to potentially perform a sandbox escape via malicious network traffic. Chromium security severity: High...