63986 matches found
CVE-2026-67926
An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...
CVE-2026-49306: Use After Free
UAF vulnerability in the time and time zone module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-60357
The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...
CVE-2026-50769
The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection time-based vulnerability. The check conflict endpoint index.php?module=Appointments&action=CheckConflictOfDates&ajaxSkipHeader=true which is used to check any conflicts for user calendar is...
PT-2026-76781
Name of the Vulnerable Software and Affected Versions FreeCAD versions prior to 1.1.2 Description An issue exists in the PropertyPythonObject::Restore function within src/App/PropertyPythonObject.cpp where the software passes an attacker-controlled module attribute from serialized...
PT-2026-73227
Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-63667: Improper Limitation of a Pathname to a Restricted Directory
ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled id, name, and extension fields in aposAttachments.json without ensuring that...
CVE-2026-49302: Exposure of Sensitive Information to an Unauthorized Actor
Permission control vulnerability in the notification service module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49308: Undefined Security Weakness
Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
The vulnerability of the kexec module in the Linux operating system allows a hacker to trigger a system failure.
The vulnerability of the kexec module in the Linux operating system is related to a deficiency in the mechanism for verifying the source of the code. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of the nft_add_set_elem() function in the net/netfilter/nf_tables_api.c kernel module of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the nftaddsetelem function in the net/netfilter/nftablesapi.c kernel module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the Linux operating system’s kernel module fat allows a hacker to cause a service failure.
The vulnerability of the fat kernel module in the Linux operating system is related to a significant loss of significance. Exploiting this vulnerability can allow an attacker to cause a service failure using a corrupted FAT image...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099892)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099892 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: iscsitcp: Check that sock is valid before iscsisetparam The validity of sock should be...
CVE-2026-67926
The JeecgBoot v.3.9.2 software is affected by a vulnerability in its AI Chat Module that allows a remote attacker to achieve arbitrary code execution . The flaw is triggered via the files Parameter . The impact is rated as CRITICAL with a CVSS v3.1 score of 9.8 , indicating high severity across c...
PT-2026-76796
Name of the Vulnerable Software and Affected Versions hashcat versions after 7.1.2 Description A heap buffer overflow exists in the KeePass AESKDF/KDBX v4 module module 34301. The issue occurs when the module processes the ninth hash field token; while it accepts up to 600 hex characters, it...
PT-2026-76792
An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...
CVE-2026-67926: Improper Control of Generation of Code
An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module...
CVE-2026-58561: NULL Pointer Dereference
Null pointer dereference issue in the image codec module. Impact: Successful exploitation of this vulnerability may affect availability...