648813 matches found
NewStart CGSL MAIN 7.02 : curl Vulnerability (NS-SA-2026-0092)
The remote NewStart CGSL host, running version MAIN 7.02, has curl packages installed that are affected by a vulnerability: - 1. A cookie is set using the secure keyword for https://target 2. curl is redirected to or otherwise made to speak with http://target same hostname, but using clear text...
cjose -- Heap-based Buffer Overflow
https://github.com/OpenIDC/cjose/security/advisories/GHSA-75r7-f5cv-g3wj reports: OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. Prior to version 0.6.2.5, cjose's JWE decryption path for the AES Key Wrap key-management algorithms alg = A128KW, A192KW,...
ALSA-2026:65116 Important: opentelemetry-collector security update
Collector with the supported components for a AlmaLinux build of OpenTelemetry Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs CVE-2026-39820 mime: golang:...
KLA91265 Multiple vulnerabilities in Microsoft Developer Tools
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...
PT-2026-88512
Impact The Git node's clone operation matched the destination path against the default N8N BLOCK FILE PATTERNS expression, which was written so that a crafted path caused catastrophic backtracking. Evaluation runs synchronously in the main n8n process, so an authenticated user could freeze the...
PT-2026-87345
CVE-2026-69298 scores 7.8. Integer overflow in Windows Biometric Service lets authorized local attackers gain SYSTEM privileges. Exploitation unlikely; no public disclosure or in-the-wild use yet. Patch now for Windows 10 1607 and others. https://t.co/Vsem3XKkvS https://t.co/Pahr2IXjiN...
PT-2026-87924
🚨 CVE-2026-73015 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-87893
Something to consider when ranking vulnerabilities CVE-2026-72982 has been public for a couple of days, so why aren’t attackers already using it to pop shells on DCs? Everyone has LLMs now, right? Finding a bug and producing a crash is not the same as building reliable RCE. https://t.co/HCBIKjO6N...
CVE-2026-52486
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
CVE-2026-79377
A heap overflow in the a2dpdecodersbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...
PT-2026-87157
A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...
PT-2026-87181
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via...
PT-2026-87904
🚨 CVE-2026-72994 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
EUVD-2026-72777
A heap overflow in the a2dpdecodersbc.cpp component of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...
CVE-2026-79376
CVE-2026-79376 affects the l2cap_handle_data() function in Bestechnic BES2300 Bluetooth Audio SoC firmware v3.x and earlier. An attacker can trigger a Denial of Service by sending a crafted L2CAP packet. The CVSS 3.1 score is 8.8 (HIGH) with an adjacent-network attack vector, no privileges requir...
PT-2026-87035
If a namespaced CR can mint cluster identity, that operator is a CA. If a namespaced CR can mint cluster identity, that operator is a CA. CVE-2026-78234, hawtio-operator. it reads the OpenShift Service CA private key, then issues a client cert with whatever CN you put on the Hawtio CR. the operat...
PT-2026-86949
SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact o...
PT-2026-88120
🚨 CVE-2026-83972 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...