4748 matches found
CVE-2025-59172
Ericsson Packet Core Controller PCC versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root...
CVE-2025-59177
Ericsson Packet Core Controller PCC versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages...
CVE-2025-59177 Generation of Error Message Containing Sensitive Information Vulnerability
Ericsson Packet Core Controller PCC versions prior to 1.39 contain a vulnerability in Configuration Management, allowing an attacker to execute specifically crafted commands to reveal system secret through error messages...
EUVD-2025-210512
Ericsson Packet Core Controller PCC versions prior to 1.38 contain an Improper Neutralization of Special Elements vulnerability allowing an attacker to execute arbitrary code as root...
CVE-2026-66053
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue. This replaces CVE-2026-41603...
DEBIAN-CVE-2026-55969
Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...
EUVD-2026-49155
Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...
CVE-2026-14190
The Sina Extension for Elementor WordPress plugin before 3.10.2 does not escape a value reconstructed from request input in one of its unauthenticated AJAX handlers before reflecting it into the HTML response, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of...
CVE-2026-12688 ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery
The ProfileGrid WordPress plugin before 5.9.9.7 does not verify PayPal IPN notifications before granting paid group membership, allowing unauthenticated attackers to forge a payment notification and mark any user as a paid member of any group without any payment being made...
CVE-2026-40430
Pronetiqs IntraVUE Versions 3.2.1a14 and prior have a plaintext storage of a password vulnerability that could expose cleartext credentials through the API...
CVE-2026-6516
CVE-2026-6516 affects Zohocorp ManageEngine ADAudit Plus versions before 8606. The issue is an unauthenticated remote code execution vulnerability caused by the vulnerable agent API, as described in the NVD entry. The CVSS‑3.1 metrics indicate a critical severity (10.0) with network attack vector...
CVE-2026-48537
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configuration that allows authenticated attackers to inject arbitrary web script or HTML via the excluded extensions parameter to /Archiver/FileArchiveAssistantWizard.aspx. The injected...
CVE-2026-65690
Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its file upload functionality that allows authenticated attackers to traverse outside the intended directory by supplying a crafted filename. Attackers can exploit this path traversal...
Astra Linux – Vulnerability in Chromium
Before version 148.0.7778.168, WebAudio in Google Chrome allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Uninitialized use in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
The use of after-free in the DOM in Google Chrome before version 148.0.7778.179 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Integer overflow in ANGLE in Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Critical...
Astra Linux – Vulnerability in Chromium
Before version 150.0.7871.47, reading content from the Chromecast using Google Chrome allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from the process’s memory through a crafted HTML page. Chromium security severity: Medium...
NPM: n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data
NPM: n8n: Custom Header Credential Values Leaked in Plaintext into LLM Node Execution Data vulnerability discovered by ? in WordPress Npm n8n versions 1.123.64...