68761 matches found
CVE-2026-34860
Technical details about CVE-2026-34860 are not publicly available in the provided documents. Monitor for updates from vendors and security trackers to obtain affected products, impact specifics, and remediation.
CVE-2026-34851
CVE-2026-34851 is described as a race condition in the event notification module with availability impact. Public sources (NVD) list CVSSv3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base 7.5, HIGH). Huawei CNA notes a lower local-impact vector (AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L, base 2.2, LOW). E...
CVE-2026-34851
Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-34851
Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-34851
Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability...
perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files
A flaw was found in XML::Parser, a Perl module for parsing XML. This vulnerability, an off-by-one heap buffer overflow, occurs when processing an XML file with very deep element nesting. A remote attacker could exploit this by providing a specially crafted XML file, potentially leading to memory...
PT-2026-32232
Race condition vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-32254
Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-34861: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-32250
UAF vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-32234
Name of the Vulnerable Software and Affected Versions LBS module affected versions not specified Description A permission bypass issue exists in the LBS module, which may affect availability. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
PT-2026-32520
Name of the Vulnerable Software and Affected Versions Vtiger CRM version 8.4.0 Description A reflected cross-site scripting XSS issue exists in the MailManager module, where XSS is a type of attack that injects malicious scripts into a trusted website. Improper handling of user-controlled input i...
Important: python3.9
Issue Overview: When folding a long comment in an email header containing exclusively unfoldable characters, the parenthesis would not be preserved. This could be used for injecting headers into email messages where addresses are user-controlled and not sanitized. CVE-2025-11468 User-controlled...
CVE-2026-30813: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search. This issue affects Pandora FMS: from 777 through 800...
PT-2026-32387
Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search. This issue affects Pandora FMS: from 777 through 800...
CVE-2026-26460
A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neutralize user-supplied input in the tabid parameter of the DashBoardTab view getTabContents action, allowing an attacker to inject arbitrary HTML content into the dashboard...
CVE-2026-26460
A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0. The application fails to properly neutralize user-supplied input in the tabid parameter of the DashBoardTab view getTabContents action, allowing an attacker to inject arbitrary HTML content into the dashboard...
CVE-2026-26460
An HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM version 8.4.0 . The application fails to properly neutralize user-supplied input within the tabid parameter of the DashBoardTab view (specifically during the getTabContents action ). This flaw allows an attacker to injec...
CVE-2026-28553: Undefined Security Weakness
Vulnerability of improper permission control in the theme setting module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...