277231 matches found
CVE-2026-30082
Multiple stored cross-site scripting XSS vulnerabilities in the Edit feature of the Software Package List page of IngEstate Server v11.14.0 allow attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the About application, What's news, or Release note parameters...
PT-2026-28757
Name of the Vulnerable Software and Affected Versions Totolink A3300R version 17.0.0cu.557 b20221024 Description A flaw exists in the Totolink A3300R device. The setUPnPCfg function within the /cgi-bin/cstecgi.cgi file is susceptible to command injection through manipulation of the enable argumen...
AL-KO Robolinho Update Software 信任管理问题漏洞
AL-KO Robolinho Update Software is a firmware update tool developed by the German company AL-KO. Version 8.0.21.0610 of AL-KO Robolinho Update Software contains a vulnerability related to trust management. This vulnerability stems from hard-coded AWS keys, which may allow unauthorized access to A...
IngEstate Server 安全漏洞
IngEstate Server is a real estate asset management and information service platform developed by IngEstate Server Inc. IngEstate Server v11.14.0 contains a security vulnerability. This vulnerability stems from an editing function on the software package list page that allows for stored cross-site...
traefik-3.6.12-1.1 on GA media (moderate)
traefik-3.6.12-1.1 on GA media Announcement ID: openSUSE-SU-2026:10444-1 Rating: moderate Cross-References: CVE-2026-32305 CVE-2026-32595 CVE-2026-32695 Affected Products: openSUSE Tumbleweed An update that solves 3 vulnerabilities can now be installed. Description: These are all security issues...
EUVD-2026-16983
A vulnerability was determined in mxml up to 4.0.4. This issue affects the function indexsort of the file mxml-index.c of the component mxmlIndexNew. Executing a manipulation of the argument tempr can lead to stack-based buffer overflow. The attack is restricted to local execution. The exploit ha...
BELL-CVE-2026-23350 CVE-2026-23350 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-23305
Bulletin has no description...
BELL-CVE-2026-23323 CVE-2026-23323 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-23309
Bulletin has no description...
BELL-CVE-2026-23338
Bulletin has no description...
BELL-CVE-2026-23288 CVE-2026-23288 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-23322
Bulletin has no description...
BELL-CVE-2026-23314
Bulletin has no description...
BELL-CVE-2026-23283 CVE-2026-23283 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-21711 CVE-2026-21711 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-23280
Bulletin has no description...
CVE-2026-5031 BichitroGan ISP Billing Software Endpoint users-view resource injection
A vulnerability was found in BichitroGan ISP Billing Software 2025.3.20. Impacted is an unknown function of the file /?route=settings/users-view/ of the component Endpoint. The manipulation of the argument ID results in improper control of resource identifiers. The attack can be launched remotely...
CVE-2026-5031
A vulnerability was found in BichitroGan ISP Billing Software 2025.3.20. Impacted is an unknown function of the file /?route=settings/users-view/ of the component Endpoint. The manipulation of the argument ID results in improper control of resource identifiers. The attack can be launched remotely...
CVE-2026-5031
CVE-2026-5031 affects BichitroGan ISP Billing Software 2025.3.20. The vulnerability is in the Endpoint component, specifically the unknown function at the file path /?_route=settings/users-view/. The issue arises from manipulation of the argument ID , causing improper control of resource identifi...