319691 matches found
CVE-2026-7727: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in Shandong Hoteam Software PDM Product Data Management System up to 8.3.9. This affects the function GetQueryMachineGridOnePageData of the file /Base/BaseService.asmx/DataService. This manipulation of the argument SortOrder causes sql injection. The attack can be...
CVE-2026-37458
The FRRouting (FRR) software (stable/10.0 to stable/10.6) is vulnerable to a Denial of Service (DoS) via a missing input validation flaw in the MP_REACH_NLRI component. An authenticated attacker can trigger the DoS by supplying a crafted UPDATE message . The vulnerability occurs during packet and...
Malicious code in win-update-helper-tool-v2 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 251972769752a77d15c86627fe078560c49ce79a47bcc4542128386eb5362342 If run as a module, the code runs code to silently control the device via Telegram bot execute commands, exfiltrate files. --- Category: MALICIOUS - The campai...
Malicious code in system-update-tool (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4902f753d49279adae969f368b995d1ec8990f506dfb70d9c8891098f657ae9b If run as a module, the code runs code to silently control the device via Telegram bot execute commands, exfiltrate files. --- Category: MALICIOUS - The campai...
UBUNTU-CVE-2026-7688
A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component Shipments API Endpoint. The manipulation of the argument fields leads to sql injection. The attack is possible to be...
CVE-2026-7689
A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2. This vulnerability affects the function dolverifyHash in the library htdocs/core/lib/security.lib.php of the component Online Signature Module. The manipulation results in improper verification of cryptographic signature. The...
CVE-2026-7688
A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function checkValForAPI of the file htdocs/expedition/class/expedition.class.php of the component Shipments API Endpoint. The manipulation of the argument fields leads to sql injection. The attack is possible to be...
A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option. The callback function str_fdp_pli_cb() does not validate the input pointer and calls strdup() on a NULL value when the option is specified without an argument. This results in a segmentation fault and process crash.
...
BELL-CVE-2026-31690
Bulletin has no description...
BELL-CVE-2026-31653
Bulletin has no description...
BELL-CVE-2026-31654 CVE-2026-31654 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-31621 CVE-2026-31621 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-31608
Bulletin has no description...
BELL-CVE-2026-31569
Bulletin has no description...
BELL-CVE-2026-31564 CVE-2026-31564 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-31573 CVE-2026-31573 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-31547 CVE-2026-31547 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-31553 CVE-2026-31553 does not affect BellSoft software
Bulletin has no description...
PT-2026-36908
Name of the Vulnerable Software and Affected Versions Postfix versions prior to 3.8.16 Postfix versions 3.9 prior to 3.9.10 Postfix versions 3.10 prior to 3.10.9 Description A buffer over-read can occur, potentially leading to a process crash, when an enhanced status code is used that lacks text...
Slackware Linux 15.0 / current mozilla-thunderbird Multiple Vulnerabilities (SSA:2026-122-03)
The version of mozilla-thunderbird installed on the remote host is prior to 140.10.1esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-122-03 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...