EUVD-2026-55933

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2026-19425

The CVE-2026-19425 entry concerns the Travel Agency Management System from Win Men Intermational, which has a SQL Injection vulnerability allowing unauthenticated remote attackers to inject arbitrary SQL to read, modify, or delete database contents. The documents do not specify the affected versi...

CVE-2026-19425 Win Men Intermational｜Travel Agency Management System - SQL Injection

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents...

CVE-2026-24330

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...

CVE-2026-19424

Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability. Unauthenticated remote attackers can modify a specific parameter to read other users' sensitive data...

CVE-2026-24330

A flaw was found in wildfly-core. A remote attacker, authenticated as a 'deployer' account, can import and deploy a malicious archive file from an untrusted source. This is achieved by leveraging WildFly libraries to craft a Java project that allows an HTTP POST request to upload and deploy the...

CVE-2026-24330

Affected product: wildfly-core. A vulnerability allows a remote attacker, authenticated as a deployer, to import and deploy a malicious archive from an untrusted source by abusing WildFly libraries to craft a Java project and issue an HTTP POST to upload/deploy. This can lead to further exploitat...

SUSE CVE-2026-46385

iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped over an attacker-controlled block-count value without checking the underlying reader's error state inside the loop body. Reader.ReadBlockHeader returns the count as a Go int, which is 64-bit on amd64 ...

PT-2026-70778

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An out-of-bounds write allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. An out-of-bounds write occurs when a program write...

PT-2026-70723

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70724

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds write issue exists that allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially compromising the affected system...

PT-2026-70610

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70196

A vulnerability has been identified in Siemens License Server SLS All versions V5.3. The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application...

PT-2026-70464

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A heap-based buffer overflow exists in the Windows Universal Disk Format File System Driver UDFS. This issue allows an unauthorized attacker to...

PT-2026-70922

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.137 Description A use-after-free issue exists in the HTML component, which allows a remote attacker to execute arbitrary code within a sandbox by inducing the user to open a specially crafted HTML pag...

PT-2026-70637

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An integer underflow wrap or wraparound occurs, which allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the system. Integer underfl...

PT-2026-70636

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70432

Name of the Vulnerable Software and Affected Versions Windows DHCP Client affected versions not specified Description A use after free condition exists in the Windows DHCP Client. This allows an authorized attacker to execute arbitrary code locally or a remote attacker to execute arbitrary code a...

Linux Distros Unpatched Vulnerability : CVE-2026-71217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control- channel JSON with oversized numeric parameters, such as...

PT-2026-70057

Name of the Vulnerable Software and Affected Versions Travel Agency Management System affected versions not specified Description An issue exists where unauthenticated remote attackers can perform SQL Injection, a technique used to insert malicious SQL code into a query. This allows the attacker ...