769 matches found
PT-2026-33916
Name of the Vulnerable Software and Affected Versions AiAssistant affected versions not specified Description A privilege bypass issue exists that may affect service availability if successfully exploited. Recommendations At the moment, there is no information about a newer version that contains ...
PT-2026-33917
PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...
CVE-2026-31368: Improper Privilege Management
AiAssistant is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...
CVE-2026-31369: Improper Privilege Management
PcManager is affected by type privilege bypass, successful exploitation of this vulnerability may affect service availability...
ROS-20260414-73-0020
Vulnerability in kernel-lt related to unchecked array indexing. Exploitation of the vulnerability may allow an attacker to affect confidentiality, integrity and availability of protected information...
Intel Ethernet Network Adapter Driver Heap Buffer Overflow
The vulnerability of the iavfinitgetresources function in the drivers/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to compromise t...
brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion
A flaw was found in the brace-expansion component. This denial of service DoS vulnerability allows a remote attacker to provide specially crafted input containing repeated numeric brace ranges. This input causes the library to attempt an unbounded expansion, consuming excessive CPU and memory...
FreeRDP resize_vbar_entry RCE
The vulnerability of the resizevbarentry function in the RDP client FreeRDP is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Denial Of Service (DoS)
github.com/sigstore/timestamp-authority is vulnerable to Denial of Service DoS. The vulnerability is due to inefficient processing of untrusted input using string splitting in request parsing functions, which allows an attacker to send crafted inputs that trigger excessive memory allocations and...
CVE-2026-32011 OpenClaw < 2026.3.2 - Slow-Request Denial of Service via Pre-Auth Webhook Body Parsing
OpenClaw versions prior to 2026.3.2 contain a denial of service vulnerability in webhook handlers for BlueBubbles and Google Chat that parse request bodies before performing authentication and signature validation. Unauthenticated attackers can exploit this by sending slow or oversized request...
Phoenix Contact’s various products have security vulnerabilities
PHOENIX CONTACT FL SWITCH and PHOENIX CONTACT FL NAT are products of the German company PHOENIX CONTACT. PHOENIX CONTACT FL SWITCH is an industrial-grade Ethernet switch. PHOENIX CONTACT FL NAT is a series of industrial security gateways. Several products from Phoenix Contact have security...
CVE-2026-32062 OpenClaw 2026.2.21-2 < 2026.2.22 - Unauthenticated WebSocket Resource Exhaustion via Media Stream
OpenClaw versions 2026.2.21-2 up to, but not including, 2026.2.22, and @openclaw/voice-call versions 2026.2.21 up to, but not including, 2026.2.22 accept media-stream WebSocket upgrades before stream validation, allowing unauthenticated clients to establish connections. Remote attackers can hold...
EUVD-2026-10459
Due to a Missing Authorization Check in SAP Business Warehouse Service API, an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request...
hisilicon VFIO Kernel Data Compromise
The vulnerability of the functions hisiaccvfiopciopendevice and hisiaccvfiopciclosedevice in the drivers/vfio/pci/hisilicon/hisiaccvfiopci.c driver for VFIO devices in the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to...
Access Control Web Interface Module Data Compromise
The vulnerability of the Access Control web interface module in IP-telephony systems like FreePBX allows attackers to compromise the confidentiality, integrity, and accessibility of protected information...
CVE-2026-26999
Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.38 and 3.6.9, there is a potential vulnerability in Traefik managing TLS handshake on TCP routers. When Traefik processes a TLS connection on a TCP router, the read deadline used to bound protocol sniffing is cleared befor...
EUVD-2026-9808
Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-28549
Race condition vulnerability in the permission management service. Impact: Successful exploitation of this vulnerability may affect availability...
