90941 matches found
CVE-2026-78902: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...
CVE-2026-94445: Improper Input Validation
A malicious txtar could escape the intended execution context and force arbitrary writes to the playground host's trusted filesystem. Disjointly, one of the three possible paths to invoke go vet on the playground host did not correctly restrict the execution environment. This permitted a Go proce...
CVE-2026-96873: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Mediawiki - CirrusSearch extension allows Reflected XSS. This issue affects Mediawiki - CirrusSearch extension through 1.46.0...
CVE-2026-88916: Incorrect Authorization
Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Privilege Escalation. This issue affects UlakPDF: through 09092026...
CVE-2026-19532: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: from 2.3.2 before 2.3.4-1124...
CVE-2026-78310: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...
CVE-2026-78309: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...
CVE-2026-93541: Out-of-bounds Read
An out-of-bounds read in libXi's XQueryDeviceState in libXi before 1.8.4 could be used by a...
CVE-2026-78311: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...
CVE-2026-90481: Authentication Bypass Using an Alternate Path or Channel
In PortSwigger Burp Suite DAST formerly Burp Suite Enterprise Edition before 2026.8, an authentication bypass can occur via an alternate path or channel...
CVE-2026-93289: Improper Neutralization of Special Elements used in an OS Command
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process...
CVE-2026-14441: Comparison Using Wrong Factors
A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...
CVE-2026-78313: Improper Access Control
Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...
CVE-2026-93213: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: of: fix out-of-bounds read in ofaliasscan stem parser The stem parser tests isdigitend - 1 before checking end start and so reads one byte before the property name when the name is empty or all digits. Check the bound first...
CVE-2026-51996: Use of Weak Hash
An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the getServerUrlHash function...
CVE-2026-88365: Integer Overflow or Wraparound
minimp3 commit ea99364f contains an integer overflow vulnerability in mp3decskipid3v1 when parsing the APEv2 tag-size field...
CVE-2026-81645: Out-of-bounds Read
Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability...
CVE-2026-77703: Key Exchange without Entity Authentication
Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle AiTM. This issue affects Liman Render Engine: from 1.0 before 1.2-75...