248594 matches found
CVE-2026-55971
A flaw was found in Apache Thrift C++ bindings. A remote, unauthenticated attacker can exploit a heap-based buffer overflow vulnerability without user interaction. This can lead to arbitrary code execution, allowing the attacker to gain full control over the affected system, compromise data, and...
Security Bulletin: Sterling Order Management System Software, (On prem)
Summary Multiple vulnerabilities were addressed in Sterling Order Management System Software, On prem : 10.0.2607.0-Sterling-SSFF-All-Major-Update-Installer Vulnerability Details CVEID:CVE-2026-48978 DESCRIPTION: oras-go is a Go library for managing OCI artifacts. Prior to 2.6.1, auth.Client...
Gladinet CentreStack & TrioFox - Local File Inclusion
In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and...
sar2html <=3.2.2 Plot Parameter - Remote Code Execution
sar2html version 3.2.2 and prior contains an OS command injection vulnerability in the plot parameter of index.php. A remote, unauthenticated attacker can append shell metacharacters to the plot parameter and execute arbitrary operating system commands. id: CVE-2025-34030 info: name: sar2html...
CVE-2026-18452 Rich Source|DMS+ (Non-Mobile) - Use of Hard-coded Credentials
DMS+ Non-Mobile developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices...
EUVD-2026-51393
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner’s parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...
GHSA-FF33-VW52-C9P4 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-534Q-W7FF-7VH6 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-8VPQ-9F8G-39VM vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-59870 vulnerabilities
Vulnerabilities for packages: renovate...
GHSA-96FG-W4M5-JGWC vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16387 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-97HW-VMR9-C44J vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-JWQR-9422-W9P4 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-7RG2-8XRH-RWH8 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-4WJ3-8493-W74M vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-QVXH-VVJM-VPWG vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-16412 vulnerabilities
Vulnerabilities for packages: firefox...