27569 matches found
SUSE CVE-2026-53448
Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.12.0, the coturn HTTPS admin panel passes HTTP query parameters directly into SQL queries via snprintf string interpolation without sanitization. The issecurestring filter that protects the STUN protocol path is not...
The vulnerability in the driver/net/ppp/ppp_generic.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the driver/net/ppp/pppgeneric.c component in the Linux operating system is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to execute arbitrary code.
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
ROS-20260715-73-0013
The vulnerability of the ANGLE library in the Google Chrome browser for MacOS operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page...
CVE-2026-30623
LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality. The application allows users to add MCP servers via a JSON configuration specifying arbitrary command and args values. LiteLLM executes these values on the host without validation, enabling...
The vulnerability in the implementation of the SMB network protocol for Windows operating systems allows attackers to disclose sensitive information.
The vulnerability of the SMB network protocol implementation in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability can allow a perpetrator to disclose sensitive information that is protected by security measures...
The vulnerability of the BitLocker component of the Windows operating system, which allows a hacker to circumvent existing security restrictions
The vulnerability of the BitLocker component of the Windows operating system is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
CVE-2026-48345 Animate | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Animate is affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...
CVE-2026-48347
Animate is affected by an OS Command Injection (CWE-78) due to improper neutralization of special elements in an input that is used in an OS command. This can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction: the victim must open a malici...
CVE-2026-15410
A post-authentication Code Injection vulnerability (CVE-2026-15410) exists in the SonicWall SMA1000 Appliance Management Console (AMC) . This flaw allows a remote authenticated attacker with administrator privileges to execute arbitrary OS commands under specific conditions. The vulnerability is ...
CVE-2026-15410
Post-authentication improper control of generation of code 'Code Injection' vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands...
EUVD-2026-44065
Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to disclose information with a physical attack...
EUVD-2026-43900
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Operating Systems allows an authorized attacker to elevate privileges locally...
EUVD-2026-43988
Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally...
CVE-2026-56187
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-50498
Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...
CVE-2026-50431
Windows Quality of Service QoS Packet Scheduler Information Disclosure Vulnerability...