34211 matches found
Ivanti Connect Secure 22.8R2.x < 22.8R2.5 / 25.1.0.x / 25.1.1.x < 25.1.1.2 / 25.1.2.x < 25.1.3.0 Authentication Bypass (CVE-2026-104935)
The Ivanti Connect Secure install on the remote host is 22.8R2.x prior to 22.8R2.5, 25.1.0.x or 25.1.1.x prior to 25.1.1.2, or 25.1.2.x prior to 25.1.3.0. It is, therefore, affected by an authentication bypass by spoofing vulnerability: - An authentication bypass by spoofing in Ivanti Connect...
PT-2026-116225
Уязвимость модуля Advanced Malware Protection AMP средства защиты Cisco Secure Email Gateway связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ на запись произвольных файлов и выполнить произвольные...
PT-2026-113984
nx secure x509 parse signature data computes the certificate signature's length as tlv length - 1 without first checking that tlv length is non-zero. A certificate whose signature is an empty ASN.1 BIT STRING therefore parses successfully and leaves the certificate holding a signature length of...
PT-2026-113985
The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The ClientHello parser copies the client's cookie bytes over the value the server issued, and the server then decides whether the client has been verified from...
CVE-2026-106465: Authentication Bypass by Spoofing
The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns. The ClientHello parser copies the client's cookie bytes over the value the server issued, and the server then decides whether the client has been verified from...
CVE-2026-102015: Heap-based Buffer Overflow
A Heap-based Buffer Overflow vulnerability in the secure-dot1xd process of Juniper Networks on Junos OS and Junos OS Evolved allows an unauthenticated adjacent network attacker to execute code as root or cause a denial of service via an EAPOL frame sent to an 802.1X-authenticated interface...
CVE-2026-73798: Misinterpretation of Input
A security vulnerability in HPE NonStop DNS 9.2.3 Non Secure Version could cause a Denial of Service...
PT-2026-113737
Name of the Vulnerable Software and Affected Versions Cisco Secure Email Gateway versions prior to 15.5.5-014 Cisco Secure Email Gateway version 16.0 Cisco Secure Email Gateway versions prior to 16.5.0-780 Description A relative path traversal issue exists in the Advanced Malware Protection AMP...
The Secure Software Factory: A Reference Architecture
The Secure Software Factory: A Reference Architecture is a 26-page whitepaper outlining a security framework for AI-driven software development environments. It describes how organizations can safely deploy autonomous coding agents by enforcing four security boundaries: sandbox isolation, network...
PT-2026-113856
Name of the Vulnerable Software and Affected Versions Junos OS affected versions not specified Junos OS Evolved affected versions not specified Description A Heap-based Buffer Overflow occurs in the secure-dot1xd process. This allows an unauthenticated adjacent network attacker to execute code wi...
CVE-2026-102061: Stack-based Buffer Overflow
A Stack-based Buffer Overflow vulnerability in the phone-home daemon phcd of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent unauthenticated attacker to execute arbitrary code as root via a crafted DHCP SZTP bootstrap message. This issue only affects platforms that support...
CVE-2026-101950: Heap-based Buffer Overflow
A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows an unauthenticated network attacker to cause a denial of service and potentially compromise confidentiality and integrity via malformed IPv4 packets reaching an interface configured f...
Cisco Secure Email Gateway Relative Path Traversal Vulnerability
Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system...
CVE-2026-96865
Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...
CVE-2026-85926
Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...
CVE-2026-70026
Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...
CVE-2026-70017
Access of resource using incompatible type 'type confusion' in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...
CVE-2026-102221
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
EUVD-2026-100369
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally...
CVE-2026-102221
A security feature bypass vulnerability exists in Windows Secure Boot (CVE-2026-102221), which allows an authorized attacker to bypass a security feature locally . The vulnerability is associated with CWE-299 (Improper Check for Certificate Revocation). The impact involves a high integrity impact...