The vulnerability of the dhclient component in FreeBSD operating systems allows a attacker to execute arbitrary code with root privileges.

The vulnerability of the dhclient component in FreeBSD operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the Cookies component in the Firefox web browser and the Thunderbird email client relates to bypassing authentication by using an alternative path or channel. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the Popup Blocker component in the Firefox web browser and Thunderbird email client allows a hacker to compromise data integrity.

The vulnerability of the Popup Blocker component in the Firefox web browser and Thunderbird email client is related to the false representation of critical information to the user interface. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

The vulnerability in the Firefox web browser and Thunderbird email client relates to the issue of operations going beyond the buffer boundaries in memory, allowing attackers to trigger a service failure.

The vulnerability in the Firefox web browser and Thunderbird email client is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Photon OS 5.0: Dnsmasq PHSA-2023-5.0-91-0041

An update of the dnsmasq package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0041. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-15972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an unauthenticated denial of service through unbounded connection acceptan...

The vulnerability of the Termix server management software, related to access control errors, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Termix server management software is related to access control errors. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the `index_local_file_headers_within_bounds()` function in the `libclamav/unzip.c` file of the ClamAV antivirus program allows a hacker to execute arbitrary code and cause service failure.

The vulnerability of the indexlocalfileheaderswithinbounds function in the libclamav/unzip.c file of the ClamAV antivirus program is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code and cause service failures...

The vulnerability of the imageUploadHandle() function in the WPBookit plugin, a content management system for WordPress websites, allows a hacker to execute arbitrary code.

The vulnerability of the imageUploadHandle function in the WPBookit plugin of the WordPress content management system involves unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2026-69964

Name of the Vulnerable Software and Affected Versions Feast affected versions not specified Description Improper deserialization of user-defined functions UDFs stored in the registry, which are serialized using the dill library, allows for arbitrary code execution. In default configurations, a...

PT-2026-69387

Name of the Vulnerable Software and Affected Versions Samsung Dialer versions prior to SMR Aug-2026 Release 1 Description Improper input validation in the Samsung Dialer allows remote attackers to access SIM related functions. This issue requires user interaction to be triggered. Recommendations...

CVE-2025-13294: Improper Neutralization of Special Elements used in an SQL Command

An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0. Multiple HTTP endpoints incorporate attacker-controlled parameters directly into SQLite queries without sufficient validation or parameterization. A remote unauthenticated attacker can exploi...

CVE-2026-19384: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0. The affected element is an unknown function of the file /admin/ajax.php?action=setappointment. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-15683: Missing Authentication for Critical Function

TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An unauthenticated remote attacker can invoke specific HTTP endpoints to reboot or reset the device, clear application data, or terminate the web server through a segmentation faul...

PT-2026-69424

Name of the Vulnerable Software and Affected Versions Apache IoTDB versions prior to 1.3.8 Apache IoTDB versions 2.0.0 through 2.0.8 Description Improper validation of length fields in the RPC service allows a remote unauthenticated attacker to cause a denial of service. By sending a crafted...

CVE-2026-72688: Missing Authentication for Critical Function

A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function. The function mints MASTERKEY-signed file access tokens for any caller-supplied URL without...

PT-2026-69872

Name of the Vulnerable Software and Affected Versions multicluster-global-hub affected versions not specified Description The manager component fails to properly validate the source identity of incoming CloudEvents on Kafka status topics. A remote attacker who has compromised a managed hub and...

The vulnerability of the PT MaxPatrol 10 security control system, which allows a violator to increase their privileges

The vulnerability of the PT MaxPatrol 10 security control system is related to access control errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise the integrity and confidentiality of the protected data...

Vulnerability of the WebRTC component: The Audio/Video features in the Firefox web browser and the Thunderbird email client, which allow attackers to trigger a service failure.

The vulnerability of the WebRTC component: The Audio/Video features in the Firefox web browser and the Thunderbird email client are related to insecure privilege management. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the net/http.Transport component, which is used by the Containous Traefik reverse proxy server, allows attackers to disclose sensitive information that should be protected.

The vulnerability of the net/http.Transport component, which is used by the Containous Traefik reverse proxy server, is related to HTTP request processing flaws. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the system...