162655 matches found
PT-2026-87771
Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...
PT-2026-87747
Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...
PT-2026-87424
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
WordPress Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce plugin <= 4.1.22 - Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation vulnerability
Missing Authorization to Unauthenticated Arbitrary Order Creation and Status Manipulation vulnerability discovered by Wordfence PRISM in WordPress Plugin WP Event Solution versions = 4.1.22...
PT-2026-87954
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
PT-2026-87965
Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-87987
Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to execute code over a network...
PT-2026-86989
Unauthenticated Privilege Escalation in Product Catalog Enquiry for WooCommerce by MultiVendorX = 6.1.4 versions...
PT-2026-87115
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in deleteHistory.json.php and finishAll.json.php that allows unauthenticated attackers to mutate live history by making GET requests without CSRF token validation. Attackers can...
Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information
...
PT-2026-87100
Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...
PT-2026-86950
SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. An unauthenticated attacker with network access to the affected service could exploit this weakness to register an unauthorized component and potentially...
Oracle Linux 10 : ELSA-2026-64788-0: / git-lfs (ELSA-2026-647880)
The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-647880 advisory. 3.7.1-7 - Rebuild with new Golang 3.7.1-6 - Rebuild with new Golang Tenable has extracted the preceding description block directly from the Oracle...
CVE-2026-58649
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-69304
Improper handling of highly compressed data data amplification in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-69439
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
PT-2026-87202
Weeraphat Srisutham discovered that the .NET watch BrowserRefreshServer did not properly validate cross-origin WebSocket connections. An attacker could possibly use this issue to expose sensitive information. CVE-2026-58649 Rajesh Chada discovered that the .NET watch AspireServerService improperl...
PT-2026-87538
@deskmodder Important context: CVE-2026-69522 is a UI:R crafted-file RCE in this servicing set. If Visual Studio is in the environment, pair the .NET bumps with VS 2026 18.9.3 or VS 2022 17.14.40...
Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability
Overview Skullcandy Dime 3 wireless earbuds, running firmware version 1.0.0.28, accept a new Bluetooth Classic BR/EDR pairing request from an unpaired device without requiring the earbuds to be placed into pairing mode or requiring any physical confirmation or interaction from the owner...