CVE-2026-32225

Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-30616

CVE-2026-30616 relates to Jaaz 1.0.30, with a remote code execution vulnerability in the MCP STDIO command handling. An attacker can send crafted network requests to the network-accessible Jaaz application, leading to attacker-controlled commands executed in the Jaaz service process and potential...

CVE-2026-33827 Windows TCP/IP Remote Code Execution Vulnerability

...

Synology SSL VPN Client 安全漏洞

The Synology SSL VPN Client is a VPN client software developed by Synology, a Chinese company, used for secure connection to Synology NAS devices. Versions of the Synology SSL VPN Client prior to 1.4.5-0684 contained security vulnerabilities. These vulnerabilities stemmed from externally accessib...

Juniper Networks CTP OS 安全漏洞

Juniper Networks CTP OS is an operating system used by Juniper Networks for migrating from circuit-to-packet networks. There are security vulnerabilities in Juniper Networks CTP OS versions 9.2R1 and 9.2R2. These vulnerabilities stem from weak password requirements in the password management...

PocketMine-MP: Network amplification vulnerability with `ActorEventPacket`

Impact The server handles ActorEventPacket to trigger consuming animations from vanilla clients when they eat food or drink potions. This can be abused to make the server spam other clients, and to waste server CPU and memory. For every ActorEventPacket sent by the client, an animation event will...

BIT-DOTNET-2026-26127 .NET Denial of Service Vulnerability

Out-of-bounds read in .NET allows an unauthorized attacker to deny service over a network...

Microsoft Azure AI Foundry 授权问题漏洞

Microsoft Azure AI Foundry is a platform tool developed by the American company Microsoft, used for building, managing, and deploying enterprise-level AI models and services. There is an authorization issue vulnerability in Microsoft Azure AI Foundry; this vulnerability stems from improper...

PT-2026-46559

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description A use after free issue in the Network component allows a remote attacker to potentially exploit heap corruption through malicious network traffic. Use after free occurs when an...

The vulnerability of Cisco IOS XE Catalyst 9800 network device’s operating system, related to incorrect handling of missing values, allows a intruder to trigger a service failure.

The vulnerability of the Cisco IOS XE network device Catalyst 9800 relates to incorrect handling of missing values. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

K000160507: Oracle Java SE vulnerability CVE-2026-21933

Security Advisory Description Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1;...

EUVD-2026-16589

Hidden Functionality vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to enable telnet via network...

EUVD-2026-16586

Path Traversal vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to wtite over any file via network...

EUVD-2026-16587

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network...

CVE-2026-4622

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network...

CVE-2026-4620

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network...

CVE-2026-4622

CVE-2026-4622 affects NEC Platforms, Ltd. Aterm Series devices. Multiple connected sources (NVD, JVN, EUVD, Red Hat, CIRCL, CVE list, vuln enrichment, etc.) confirm an OS Command Injection vulnerability that allows an attacker to execute arbitrary OS commands over the network. The NVD entry lists...

CVE-2026-4622

OS Command Injection vulnerability in NEC Platforms, Ltd. Aterm Series allows a attacker to execute arbitrary OS commands via network...

CVE-2026-4621

NEC Platforms, Ltd. Aterm Series devices contain a Hidden Functionality vulnerability that allows an attacker to enable Telnet over the network. According to the NVD entry, the issue has a CVSS v4.0 base score of 6.3 (MEDIUM) with Network attackVector, HIGH attackComplexity, no privileges require...

PT-2026-28648

Name of the Vulnerable Software and Affected Versions NEC Platforms, Ltd. Aterm Series affected versions not specified Description An OS Command Injection issue exists in NEC Platforms, Ltd. Aterm Series. This allows a malicious actor to execute arbitrary OS commands through the network...