ROS-20260921-73-0128

The vulnerability in Golang is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260921-73-0131

The vulnerability in Golang is related to algorithmic complexity. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-36471

Deserialization of Untrusted Data of the postdata parameter in cnparseurl in CuteNews v.2.1.2 allows a remote attacker to inject arbitrary values into internal request variables including referer via a crafted base64-encoded serialized PHP payload submitted as a POST parameter...

ROS-20260921-73-0084

The vulnerability involves bypassing authentication through spoofing. Exploiting this vulnerability allows a remote attacker to carry out spoofing attacks...

ROS-20260921-73-0090

The vulnerability is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260921-73-0041

The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Libssh2 Packet Add DoS

The vulnerability of the libssh2packetadd function in the src/packet.c component of the SSH2 protocol implementation library Libssh2 involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Windows Imaging Component Code Execution

The vulnerability of the Windows Imaging Component WIC in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Microsoft Office Memory Execution Arbitrary Code

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MariaDB SST Command Execution

The vulnerability of the State Snapshot Transfer SST mechanism of the MariaDB database management system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

MariaDB wsrep_notify_cmd Command Execution

The vulnerability of the wsrepnotifyCmd function in the MariaDB database management system is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CWMP/TR-069 Protocol Code Execution Root Privileges

The vulnerability of the CWMP/TR-069 protocol implementation of TP-Link Archer VX1800v V1 software lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root...

ROS-20260921-73-0005

The vulnerability in ElasticSearch is related to algorithmic complexity. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260921-73-0006

The vulnerability in ElasticSearch is related to unlimited resource distribution. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2026-93562

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request...

NPM vm2 Code Execution

The vulnerability of the NPM package manager’s vm2 library is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-84081

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper certificate validation...

CVE-2026-84077

IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site request forgery vulnerability...

CVE-2026-82892

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...

CVE-2026-75878

IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header...