B&R Automation X20EDS410 Multiple Releases of Same Resource or Handle (CVE-2026-43494)

The Linux kernel version shipped with the affected B&R product X20EDS410 is affected by a vulnerability. A flaw in the kernel's net/rds zerocopy path that fails to reset opnents, leading to a double free. Successful local exploitation of this vulnerability could allow an authenticated attacker wi...

CVE-2026-28316

SolarWinds Serv-U has an IDOR vulnerability (CVE-2026-28316) that can escalate privileges to a system administrator with the ability to run commands as root. A domain account with administrator access is required. The impact is noted as lower in Windows deployments. The connected documents provid...

CVE-2026-8933

A local privilege escalation affecting snap-confine (used by Canonical snapd) configured with set-capabilities. The flaw lies in how privilege boundaries/security sandboxes are initialized when running under limited ambient capabilities, allowing an unprivileged local user to bypass restrictions ...

CVE-2026-21915 JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to root

A Permissive List of Allowed Input vulnerability in the CLI of Juniper Networks Support Insights JSI Virtual Lightweight Collector vLWC allows a local, high privileged attacker to escalate their privileges to root. The CLI menu accepts input without carefully validating it, which allows for shell...

PT-2026-3788

Name of the Vulnerable Software and Affected Versions Cisco Intersight Virtual Appliance affected versions not specified Description A flaw exists in the read-only maintenance shell of the appliance that may allow a local attacker with administrative privileges to gain root access. This is caused...

CVE-2025-43890

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralizatio...

CVE-2025-43890

Dell PowerProtect Data Domain with DD OS feature releases from 7.7.1.0–8.3.0.15, LTS2025 8.3.1.0, LTS2024 7.13.1.0–7.13.1.30, and LTS2023 7.10.1.0–7.10.1.60 contains an OS command injection vulnerability (Improper Neutralization of Special Elements used in an OS Command). A high-privilege local a...

EUVD-2020-27384

Malware in sbrugna...

EUVD-2020-18806

Malware in sbrugna...

EUVD-2008-2109

Malware in sbrugna...

EUVD-2020-7905

Malware in sbrugna...

EUVD-2021-17387

Malware in sbrugna...

EUVD-2020-12771

Malware in sbrugna...

EUVD-2025-31589

Malicious code in bioql PyPI...

EUVD-2024-34375

Malicious code in bioql PyPI...

EUVD-2022-30685

Malicious code in bioql PyPI...

EUVD-2022-28086

Malicious code in bioql PyPI...

EUVD-2022-24677

Malicious code in bioql PyPI...

EUVD-2021-29095

Malicious code in bioql PyPI...

PT-2025-34780 · Kapsch Trafficcom · Ris-9160 +1

Name of the Vulnerable Software and Affected Versions: Kapsch TrafficCom RIS-9160 & RIS-9260 Roadside Units RSUs versions 3.2.0.829.23, 3.8.0.1119.42, and 4.6.0.1211.28 Description: An incorrect access control issue exists in the EEPROM component, allowing attackers to replace password hashes...