91325 matches found
CVE-2026-76148: Improper Control of Generation of Code
CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product...
CVE-2026-75332: Server-Side Request Forgery (SSRF)
Zyplayer-Doc =1.0.0 is vulnerable to Server-Side Request Forgery SSRF via WikiPageWebService.download...
CVE-2026-21807: Stack-based Buffer Overflow
HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...
CVE-2026-75340: Server-Side Request Forgery (SSRF)
The device metadata import interface /device/instance/productId/property-metadata/import of jetlinks community 2.11 is vulnerable to Server-side request forgery SSRF...
CVE-2026-58070: Insertion of Sensitive Information into Log File
A vulnerability that records guest OS processing credentials in cleartext in a support log on the guest, allowing a user with read access to that log to recover privileged account credentials...
CVE-2026-51106: Uncontrolled Resource Consumption
An issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src/persistence/serialize.cpp component...
CVE-2026-71172: Server-Side Request Forgery (SSRF)
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery SSRF vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...
CVE-2026-68861: Improper Neutralization of Special Elements used in an OS Command
Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...
CVE-2026-21808: Insertion of Sensitive Information into Log File
HCL BigFix Quantum Risk Analyzer generates highly detailed logging information by default which increases the risk of sensitive data leakage and can provide an attacker with internal application logic and architectural details...
CVE-2026-21810: Download of Code Without Integrity Check
HCL BigFix Quantum Risk Analyzer is affected by a hardcoded external resource reference and a lack of binary integrity which could allow an attacker to obtain sensitive information or modify the binary...
CVE-2025-29419: Channel Accessible by Non-Endpoint
CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack...
CVE-2026-58108: Improper Access Control
The personal access token removal query selects from PersonalAccessTokenDB but filters on columns of Session, with no join between them. SQLAlchemy resolves that as an implicit cross join, so the filter does not constrain the delete to the calling user's own token in the way the code reads as...
CVE-2026-59682: External Control of File Name or Path
Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...
CVE-2026-26449: NULL Pointer Dereference
In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference or access to invalid memory while processing the frame, causing the process to crash...
CVE-2026-75325: Improper Authentication
DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/' parameters...
CVE-2026-15366: Improper Isolation or Compartmentalization
A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page...
CVE-2026-47834: Undefined Security Weakness
Spring Data JPA's Sort validation can be bypassed when parameters containing crafted payload are accepted from untrusted sources. Spring Data JPA 4.1.0 Spring Data JPA 4.0.0 - 4.0.6 Spring Data JPA 3.5.0 - 3.5.13 Spring Data JPA 3.0.0 - 3.4.15...
CVE-2026-65641: Authentication Bypass Using an Alternate Path or Channel
A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...
nuclei-templates v10.4.8
Nuclei Templates Community curated list of templates for the nuclei engine to find security vulnerabilities in applications. Documentation • Contributions • Discussion • Community • FAQs • Join Discord Templates are the core of the nuclei scanner which powers the actual scanning engine. This...
