170633 matches found
PT-2026-70026
Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to sufficiently validate certain token content under specific configurations. An unauthenticated attacker can send a specially crafted token to force the transmissio...
vLLM Hardware Plugin for Intel® Gaudi® Software Advisory
Summary: A potential security vulnerability for some vLLM Hardware Plugin for Intel® Gaudi® Software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-27765 Description: Improper input validation for...
Intel® Neural Compressor software advisory
Summary: Potential security vulnerabilities for some Intel® Neural Compressor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerabilities. Vulnerability Details: CVEID: CVE-2026-20906 Description: Protection mechanism failure for some...
PT-2026-70073
Name of the Vulnerable Software and Affected Versions Axis Signed Video Framework affected versions not specified Description The Signed Video Framework contains a buffer overflow issue, which occurs when a program writes more data to a block of memory than it can hold. This flaw can cause...
PT-2026-70207
Streambert is a cross-platform Electron Desktop App to stream and download video content. Versions prior to 2.5.0 improperly validate executable paths supplied to the run-download IPC handler, allowing a compromised renderer process to execute arbitrary local binaries with the application’s...
PT-2026-70628
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...
PT-2026-70202
Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 contain a server-side request forgery vulnerability in the GraphQL saveAsset mutation, which fetches an attacker-supplied URL server-side. The anti-SSRF validation is incomplete: validateIp does not cover CGNAT 100.64.0.0/...
PT-2026-70782
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...
PT-2026-70757
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
PT-2026-70104
Name of the Vulnerable Software and Affected Versions SAP Commerce Cloud affected versions not specified Description An unauthenticated attacker can abuse a default authentication client by submitting specially crafted input to certain functions that lack sufficient validation. This flaw allows f...
Fedora 43 : chromium (2026-06d89684d6)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-06d89684d6 advisory. chromium-151.0.7922.108 security release fix 41 CVE CVE-2026-19137: Use after free in WebGL CVE-2026-19138: Heap buffer overflow in CrashReporting...
Linux Distros Unpatched Vulnerability : CVE-2026-71217
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control- channel JSON with oversized numeric parameters, such as...
PT-2026-70760
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-51583
An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...
PT-2026-70393
Name of the Vulnerable Software and Affected Versions Windows Network Address Translation NAT affected versions not specified Description An origin validation error allows an unauthorized attacker to perform spoofing over an adjacent network, which can affect the system. Recommendations At the...
PT-2026-70230
Name of the Vulnerable Software and Affected Versions NETGEAR affected versions not specified Description Insufficient input validation allows authenticated administrators connected to the local network to make unauthorized modifications to the device software and functionality. Recommendations A...
PT-2026-70910
An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 Build 9510.1044 and earlier versions which, under a successful MitM attack and controlled network conditions, could permit unauthorized changes...
PT-2026-70281
Name of the Vulnerable Software and Affected Versions IntelR Active Management Technology IntelR AMT affected versions not specified IntelR Standard Manageability affected versions not specified Description Improper input validation in the firmware may allow an unauthenticated network adversary t...