117123 matches found
CVE-2026-43835
A vulnerability exists in the firmware upgrade functionality that allows an authenticated attacker to upload a forged firmware upgrade file . This flaw could lead to the permanent compromise of the affected device. Specific details regarding the affected product, software version, root cause, and...
CVE-2026-100737
Hidden functionality issue exists in Multiple DVRs Digital Video Recorders provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware...
EUVD-2026-104797
Hidden functionality issue exists in Multiple DVRs Digital Video Recorders provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware...
CVE-2026-100737
Hidden functionality issue exists in Multiple DVRs Digital Video Recorders provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware...
CVE-2026-100737
A hidden functionality issue exists in multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. An attacker with administrator privileges can exploit this flaw to upgrade the affected devices to unauthorized firmware . The vulnerability is characterized by a Medium severity (...
Websvn <2.6.1 - Remote Code Execution
WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter. id: CVE-2021-32305 info: name: Websvn 2.6.1 - Remote Code Execution author: gy741 severity: critical description: WebSVN before 2.6.1 allows remote attackers to execute...
Rails File Content Disclosure
Rails 5.2.2.1, 5.1.6.2, 5.0.7.2, 4.2.11.1 and v3 are susceptible to a file content disclosure vulnerability because specially crafted accept headers can cause contents of arbitrary files on the target system's file system to be exposed. id: CVE-2019-5418 info: name: Rails File Content Disclosure...
PT-2026-118265
A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently...
GO-2026-6705 Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM in github.com/0xJacky/Nginx-UI
Nginx UI: Self-upgrade runs an unsigned binary verified only by a same-origin digest → RCE via a compromised mirror or MITM in github.com/0xJacky/Nginx-UI...
GLPI <=10.0.2 - Remote Command Execution
GLPI through 10.0.2 is susceptible to remote command execution injection in /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module. id: CVE-2022-35914 info: name: GLPI =10.0.2 - Remote Command Execution author: For3stCo1d,allendemoura severity: critical description: | GLPI through 10.0...
Laravel Livewire v3 - Remote Command Execution
Livewire v3 Laravel contains a vulnerability in its component hydration/update mechanism that can be exploited to reach remote command execution RCE without authentication under certain conditions. id: CVE-2025-54068 info: name: Laravel Livewire v3 - Remote Command Execution author: flame-11...
wordpress-upgrade-check
wordpress-upgrade-check Read-only check of the WordPress core version of every site on a server , with the fix table for CVE-2026-87902 critical, unauthenticated; fixed in WordPress 7.1.2 on 2026-09-22 and backported to every branch down to 4.7. For web agencies and admins who look after many...
CLSA-2026-1792208774 TuxCare security update for @angular/upgrade (1 CVE)
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 7.2.16-tuxcare.10...
CLSA-2026-1792208771 TuxCare security update for @angular/upgrade (20 CVEs)
TuxCare rebuilt @angular/upgrade to address 20 CVEs. Fixed in 16.2.11-tuxcare.1...
CLSA-2026-1792208637 TuxCare security update for @angular/upgrade (2 CVEs)
TuxCare rebuilt @angular/upgrade to address 2 CVEs. Fixed in 8.0.3-tuxcare.2...
CLSA-2026-1792208578 TuxCare security update for @angular/upgrade (1 CVE)
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 10.1.0-tuxcare.1...
CLSA-2026-1792208577 TuxCare security update for @angular/upgrade (1 CVE)
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 4.3.5-tuxcare.1...
CLSA-2026-1792208576 TuxCare security update for @angular/upgrade (1 CVE)
TuxCare rebuilt @angular/upgrade to address 1 CVE. Fixed in 15.2.2-tuxcare.1...