221 matches found
EulerOS 2.0 SP15 : gdk-pixbuf2 (EulerOS-SA-2026-2441)
According to the versions of the gdk-pixbuf2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper...
The software’s vulnerability related to data integration and analysis in Hitachi Vantara Pentaho Data Integration & Analytics allows attackers to perform XXE attacks due to incorrect restrictions on XML references to external objects.
The vulnerability of the programming tool for data integration and analysis in Hitachi Vantara Pentaho Data Integration & Analytics relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...
netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation
A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended...
MCP Server for ArangoDB 路径遍历漏洞
MCP Server for ArangoDB is a database interaction tool based on ArangoDB, developed by Alp Sarıyer. Versions of MCP Server for ArangoDB 0.4.7 and earlier had a path traversal vulnerability. This vulnerability stemmed from the function arangobackup in the MCP Interface component, which allowed for...
CVE-2026-5672
The CVE concerns code-projects Simple IT Discussion Forum 1.0. The issue resides in the Parameter Handler’s /edit-category.php, where manipulating the category ID (cat_id) enables SQL injection. This can be triggered remotely, and the exploit has been publicly disclosed. No remediation details ar...
The vulnerability of the es58x_alloc_rx_urbs() function in the drivers/net/can/usb/etas_es58x/es58x_core.c module of the Linux network device driver, which allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the es58xallocrxurbs function in the drivers/net/can/usb/etases58x/es58xcore.c module of the Linux network device driver framework is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to...
Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in IBM Semeru Runtime Quarterly CPU - Jan 2026
Summary IBM Sterling Control Center is affected by a vulnerability CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925, CVE-2026-1188 of IBM Semeru Runtime Quarterly CPU - Jan 2026 Vulnerability Details CVEID:CVE-2026-21945 DESCRIPTION: Java SE is vulnerable to a denial of service,...
CVE-2019-16340
Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for the /sysinfojson.cgi URI...
EUVD-1999-0492
Malware in sbrugna...
EUVD-2021-0951
Malware in sbrugna...
EUVD-2001-0734
Malware in sbrugna...
EUVD-2001-0399
Malware in sbrugna...
EUVD-2002-0621
Malware in sbrugna...
EUVD-2004-1744
Malware in sbrugna...
EUVD-2005-2482
Malware in sbrugna...
EUVD-2008-0917
Malware in sbrugna...
EUVD-2009-3920
Malware in sbrugna...
EUVD-2012-4163
Malware in sbrugna...