92212 matches found
CVE-2026-50772
An issue in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function...
CVE-2026-50771
Cross Site Scripting vulnerability in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions...
CVE-2026-67678
DocSys v.2.02.80 (RainyGao-GitHub) has an unauthenticated file upload flaw allowing arbitrary code execution; CISA flags it as automatable with total impact (CVSS 9.8). No patch version is specified in the provided documents. Exploitation details are not provided, though a PoC is referenced in th...
EUVD-2026-60352
An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role...
CVE-2026-67918
Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath function in api/hermes/download endpoint...
CVE-2026-50774
An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role...
CVE-2026-50776
A Directory Traversal vulnerability in Pronis Loisirs Bilttorie CSE (versions before April 2026) allows an unauthenticated remote attacker to read sensitive files and execute arbitrary code. CVSS 3.1 scores it 7.5 (HIGH) with network attack vector, low complexity, and high confidentiality impact....
CVE-2026-67678
File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code...
PT-2026-73181
A vulnerability was identified in CodeCanyon TimeCamp Integration for CRM up to 2.8. This issue affects some unknown processing of the file /clients/save contact of the component Contact Information Update. Such manipulation of the argument contact id leads to authorization bypass. The attack can...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: webkit2gtk3 (UTSA-2026-100899)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100899 advisory. The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3, macOS Tahoe 26.3,...
The vulnerability in the Apache ActiveMQ and Apache ActiveMQ Web software for web management consoles allows attackers to inject malicious HTML content.
The vulnerability of the Apache ActiveMQ and Apache ActiveMQ Web software for web management consoles is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject malicious HTML content remotely...
The vulnerability in the driver/block/rnbd/rnbd-srv.c component of the Linux operating system’s kernel allows a hacker to gain access to confidential data.
The vulnerability of the drivers/block/rnbd/rnbd-srv.c component in the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...
PT-2026-76871
Name of the Vulnerable Software and Affected Versions S2OPC version 1.7.3 Description A heap-based out-of-bounds write occurs during server-side EventFilter handling while processing CreateMonitoredItems. This flaw allows a remote attacker to execute arbitrary code. A heap-based out-of-bounds wri...
CVE-2026-68005
ACME mini_httpd versions 1.30 and prior are vulnerable to a remote denial of service via the HTTP request header parser in the handle_request() function. The vulnerability requires no authentication and can be triggered over the network with low complexity (CVSS 3.1: 7.5 HIGH ). CISA SSVC assesse...
The vulnerability of the EncryptInterceptor module in the Apache Tomcat application server allows a hacker to perform a replay attack.
The vulnerability of the EncryptInterceptor module in the Apache Tomcat application server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to carry out a replay attack...
CVE-2026-50772
An issue in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset function...
EUVD-2026-60312
SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtain sensitive information via the store functions...
CVE-2026-50774
An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role...