PT-2026-65295

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 Description A buffer overflow occurs due to...

PT-2026-65195

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versio...

CVE-2026-51296

...

PT-2026-65292

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 Description An...

PT-2026-65268

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to bypass network filters...

CVE-2026-51296

SQLite 3.41 has a use-after-free vulnerability in the JSON module’s jsonRemoveFunc. The parsed JSON object is freed at line 3555 while jsonLookupStep is called on the released pointer at line 3575, enabling remote attackers to crash the service and potentially leak heap memory information. Affect...

ROS-20260727-73-0027

A vulnerability in the Apache HTTP Server's OCSP protocol implementation is related to out-of-bounds memory access. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

PT-2026-65296

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 Description An out-of-bounds write issue exists due ...

CVE-2026-51078

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

CVE-2026-51078

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

CVE-2026-51078

Technical details about CVE-2026-51078 are not publicly provided in the supplied documents. Monitor for updates from NVD/CVE and ENISA sources for affected versions, impact, and remediation.

CVE-2026-51300

...

ROS-20260727-73-0011

A vulnerability in apache-activemq related to uncontrolled resource consumption. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

PT-2026-65033

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-51303

SQLite core parsing contains a use-after-free in sqlite3ExprListDelete (expr.c). Frees an ExprList and then accesses the freed object, enabling a remote attacker to crash the app, leak memory, or, in some scenarios, achieve arbitrary code execution. Affected component: core parsing; potentially S...

CVE-2026-51296

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

PT-2026-65313

Name of the Vulnerable Software and Affected Versions Milk admin versions prior to 0.9.9 Description Cross-site scripting XSS occurs in the Modules/Docs/DocsController.php file. This issue allows remote attackers to inject arbitrary HTML or web scripts through the action parameter in a specially...

CVE-2026-51077

Dede CMS v5.7.118 is affected by a SQL injection in the sys_sql_query.php component (parameter sqlquery). Remote attackers can obtain sensitive information with network access; no privileges required, no user interaction. Root cause: unsafely handling input in sqlquery parameter. Impact: confiden...

PT-2026-65023

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

ROS-20260727-73-0025

A vulnerability in the Apache HTTP Server's modproxyftp module is related to an infinite loop with no exit condition. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...