161386 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-113867
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas. Because values from incoming requests were echoed back in automatic replies,...
Linux Distros Unpatched Vulnerability : CVE-2026-112026
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Affected is the...
Linux Distros Unpatched Vulnerability : CVE-2026-113035
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML pag...
Linux Distros Unpatched Vulnerability : CVE-2026-113340
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a...
PT-2026-120346
Name of the Vulnerable Software and Affected Versions Tenda AC19 version 16.03.10.07 Description A stack-based buffer overflow exists in the httpd Web Management Service. The issue occurs within the formSetFirewallCfg function located in the /goform/SetFirewallCfg endpoint when processing the...
PT-2026-120651
Incorrect authorization in the Sender Rewriting Scheme SRS of Progressive Robot hMailServer 6.2.1 through 6.3.6 allows a remote attacker to relay mail through the server to outside addresses. With SRS enabled, the server rewrites the envelope sender of mail it forwards to a signed SRS address at...
PT-2026-120526
A vulnerability was identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected is the function mysqli query of the file /Admin/View/editPlan.php. Such manipulation of the argument Plan no/Name leads to sql...
PT-2026-120557
Enforceable assertion in the streaming feature of Apache bRPC version 0 and unconditionally asserts CHECKbuf.IsEmpty on the frame payload. A feedback frame that carries an unexpected payload, or a feedback frame received on a stream where flow control is disabled cur buf size == 0, reaches these...
PT-2026-120815
Name of the Vulnerable Software and Affected Versions itsourcecode Online Cake Ordering System version 1.0 Description A remote SQL injection is possible due to improper handling of the ID argument within the '/deleteproduct.php' endpoint. SQL injection is a technique where an attacker inserts...
PT-2026-120668
A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4. Affected is the function save folder/delete folder/delete file/file rename/save files of the file admin class.php of the component Folder Management. This manipulation of the...
PT-2026-120175
vLLM before 0.31.0 contains a cross-request mask leak in InputBatch.condense that allows remote attackers to constrain other clients' outputs by leaving stale allowed token ids rows. Attackers can submit concurrent constrained generate requests, including via unauthenticated /invocations, so...
CVE-2026-113735 D-Link DCS-6501LH aoni_ipc mydlink_set_root_pwd weak credentials
A vulnerability was determined in D-Link DCS-6501LH 3.03.02. Affected by this vulnerability is the function mydlinksetrootpwd of the file /mnt/mtd/aoniipc. Executing a manipulation can lead to use of weak credentials. The attack may be launched remotely. The attack requires a high level of...
CVE-2026-113735
The D-Link DCS-6501LH (firmware version 3.03.02 ) is vulnerable to a weak credentials issue (CWE-1391) within the mydlink_set_root_pwd function of the /mnt/mtd/aoni_ipc file. An attacker could potentially launch a remote attack with high complexity to exploit this flaw, although the exploitation ...
CVE-2026-113705 a2aproject a2a-rs error.rs information exposure
A vulnerability was determined in a2aproject a2a-rs up to 0.4.3. This issue affects some unknown processing of the file a2a-server/src/error.rs. Executing a manipulation can lead to information exposure through error message. The attack can be executed remotely. This patch is called...
CVE-2026-82891
IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of a hard-coded cryptographic key...
CVE-2026-113704
A vulnerability has been found in a2aproject a2a-rs up to 0.4.3. This affects the function HttpPushSender of the file crates/server/src/pushnotificationsender.rs of the component Push Notification Handler. Such manipulation of the argument TaskPushNotificationConfig leads to server-side request...
CVE-2026-113333
Memory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-113309
Out of bounds read in Media in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-113246
Memory corruption in iOSWebView in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...