91610 matches found
CVE-2026-64631: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability allowing a low-privileged user to inject SQL and extract database contents...
CVE-2026-18806: External Control of File Name or Path
External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 0.9.0...
CVE-2026-21366: Integer Overflow or Wraparound
Memory corruption while processing a packet with a size close to the maximum allowed value...
CVE-2026-24076: Buffer Copy without Checking Size of Input
Memory Corruption when processing registry values with incorrect types using a direct query method...
CVE-2026-14194: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Path Traversal. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
CVE-2026-18819: Cross-Site Request Forgery (CSRF)
A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly...
CVE-2026-25289: Stack-based Buffer Overflow
Memory Corruption when processing Device Capability Extended attributes in certain NAN Service Discovery Frames with invalid length values...
CVE-2026-24080: Buffer Copy without Checking Size of Input
Memory Corruption when handling malformed request parameters in the fingerprint TA...
CVE-2026-24077: Integer Underflow (Wrap or Wraparound)
Information Disclosure when processing wireless network channel switch information with improperly formatted length fields...
CVE-2026-58075: Improper Authentication
A vulnerability allowing an unauthenticated attacker to read arbitrary files from the host, which can be further leveraged toescalate privileges locally...
CVE-2026-14219: URL Redirection to Untrusted Site
URL redirection to untrusted site 'open redirect' vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Phishing. This issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1...
CVE-2026-64634: Improper Privilege Management
A vulnerability allowing local privilege escalation to the Reporter service context...
CVE-2026-13227: Missing Authorization
An Improper Authorization vulnerability exists in ERPNext version...
CVE-2026-25288: Buffer Over-read
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size...
CVE-2026-47614: Server-Side Request Forgery (SSRF)
NVIDIA Dynamo for Linux contains a vulnerability where an attacker may cause server-side request forgery. A successful exploit of this vulnerability might lead to information disclosure...
CVE-2026-24079: Missing Authentication for Critical Function
Cryptographic Issue while processing registration requests with malformed or missing authentication parameters...
CVE-2026-24078: Exposure of Private Personal Information to an Unauthorized Actor
Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling...
vigolium v0.3.6
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...
openvas-scanner v23.50.10
OpenVAS Scanner This is the OpenVAS Scanner of the Greenbone Community Edition. It is used for the Greenbone Enterprise appliances and is a full-featured scan engine that executes a continuously updated and extended feed of Vulnerability Tests VTs. Releases All release files are signed with the...
