200 matches found
CVE-2026-77120
creationtimestamp| type| source ---|---|--- 2026-09-08 16:45:07+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-15 2026-09-09 17:28:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/apgqf2kdfuep5...
Security Bulletin: IBM Operations Analytics - Log Analysis is affected by a TOCTOU weakness allowing active sessions to persist beyond a password change
Summary IBM Operations Analytics - Log Analysis contains a Time-Of-Check to Time-Of-Use TOCTOU weakness in its built-in user password management feature. The built-in authentication module of IBM Operations Analytics - Log Analysis is used by IBM Operations Analytics - Log Analysis as part of the...
Exploit for CVE-2026-29115
CVE-2026-29115 — Dahua Authenticated Remote Denial of Service...
CVE-2026-22002
...
CVE-2026-34018
An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product...
Adobe DNG SDK 缓冲区错误漏洞
Adobe DNG SDK is the United States of America Audobee Adobe company's a software development kit to provide the ability to read and write DNG files. An out-of-bounds write vulnerability exists in Adobe DNG SDK, which can be exploited by an attacker to cause a denial of service in an application...
PT-2026-29302
Name of the Vulnerable Software and Affected Versions PEAKSEL D.O.O. NIS Animal Sounds and Ringtones version 1.3.0 Description An arbitrary file overwrite issue exists during the file import process. This allows attackers to overwrite critical internal files, which can result in arbitrary code...
SourceCodester Online Food Ordering System 安全漏洞
The SourceCodester Online Food Ordering System is an open-source online meal ordering system developed by SourceCodester. Version 1.0 of the SourceCodester Online Food Ordering System contains a security vulnerability. This vulnerability arises from the improper cleaning of the id parameter in th...
CVE-2025-62845
creationtimestamp| type| source ---|---|--- 2026-03-23 10:37:14+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-qnap-7 2026-03-23 14:40:07+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mhqc3gk4px2k...
PT-2026-26106
A stored cross-site scripting XSS vulnerability exists in the NotChatbot WebChat widget thru 1.4.4. User-supplied input is not properly sanitized before being stored and rendered in the chat conversation history. This allows an attacker to inject arbitrary JavaScript code which is executed when t...
CVE-2026-28720
Unauthorized modification of settings due to insufficient authorization checks. The following products are affected: Acronis Cyber Protect 17 Linux, Windows before build 41186...
EUVD-2025-208262
IBM MQ Appliance 9.4 CD through 9.4.4.0 to 9.4.4.1...
CVE-2026-3378 Tenda F453 qossetting fromqossetting buffer overflow
A flaw has been found in Tenda F453 1.0.0.3. This affects the function fromqossetting of the file /goform/qossetting. Executing a manipulation of the argument qos can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...
EUVD-2026-5233
Cross-Site Request Forgery CSRF vulnerability in Copyscape Copyscape Premium copyscape-premium allows Cross Site Request Forgery.This issue affects Copyscape Premium: from n/a through = 1.4.1...
CVE-2022-23137
ZTE's ZXCDN product has a reflective XSS vulnerability. The attacker could modify the parameters in the content clearing request url, and when a user clicks the url, an XSS attack will be triggered...
CVE-2025-40801
The CVE-2025-40801 family describes a vulnerability where the SALT (Siemens Advanced Licensing Toolkit) SDK omits server certificate validation when establishing TLS connections to the authorization server. This allows potential man-in-the-middle attacks affecting Siemens products such as COMOS, ...
EUVD-2025-201494
A vulnerability was determined in TOZED ZLT M30S and ZLT M30S PRO 1.47/3.09.06. This impacts an unknown function of the file /reqproc/procpost of the component Web Interface. Executing manipulation of the argument goformId with the input REBOOTDEVICE can lead to denial of service. The attack can...
CVE-2025-64129
Zenitel TCIV-3+ is vulnerable to an out-of-bounds write vulnerability, which could allow a remote attacker to crash the device...