451 matches found
EUVD-2026-29392
Missing Authorization vulnerability in Arraytics Timetics allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Timetics: from n/a through 1.0.53...
PT-2026-28287
Name of the Vulnerable Software and Affected Versions HCL Aftermarket DPC affected versions not specified Description HCL Aftermarket DPC is susceptible to SQL Injection, potentially enabling an attacker to retrieve sensitive information from the database. The vulnerability allows an attacker to...
PT-2026-28291
Name of the Vulnerable Software and Affected Versions HCL Aftermarket DPC affected versions not specified Description HCL Aftermarket DPC is susceptible to a session fixation issue. This allows an attacker to take control of a user’s session and perform unauthorized transactions on the user’s...
PT-2026-21989
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server Liberty affected versions not specified Description IBM WebSphere Application Server Liberty may provide weaker than expected security. The issue could potentially impact the security posture of the application...
CVE-2026-24941
Missing Authorization vulnerability in wpjobportal WP Job Portal wp-job-portal allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Job Portal: from n/a through = 2.4.4...
PT-2026-20307
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A flaw exists in the management API that could allow a remote attacker without authentication to initiate service restarts. Exploitation of this issue may lead ...
PT-2026-6707
Name of the Vulnerable Software and Affected Versions Versions affected versions not specified Description A use-after-free issue exists in the security module. Successful exploitation could impact availability. Recommendations At the moment, there is no information about a newer version that...
PT-2026-6608
Name of the Vulnerable Software and Affected Versions Tanium Appliance affected versions not specified Description Tanium Appliance suffers from an improper certificate validation issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
PT-2026-6607
Name of the Vulnerable Software and Affected Versions Tanium Appliance affected versions not specified Description An improper input validation issue exists in Tanium Appliance. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2026-1371
Name of the Vulnerable Software and Affected Versions display affected versions not specified Description A memory corruption issue exists due to use after free in display. Successful exploitation could allow a malicious actor with System privileges to gain local escalation of privilege. User...
PT-2026-1300
Name of the Vulnerable Software and Affected Versions Silicon Labs Z-Wave Protocol Controller affected versions not specified Description An integer underflow condition exists in the Silicon Labs Z-Wave Protocol Controller, potentially leading to out-of-bounds memory reads. This occurs due to an...
CVE-2025-15247 gmg137 snap7-rs client.rs download heap-based overflow
A vulnerability was identified in gmg137 snap7-rs up to 153d3e8c16decd7271e2a5b2e3da4d6f68589424. Affected by this issue is the function snap7rs::client::S7Client::download of the file client.rs. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The explo...
PT-2025-53449
Name of the Vulnerable Software and Affected Versions Nozomi Networks Device Manager affected versions not specified Description A hardcoded encryption key exists for sensitive information within Nozomi Networks Device Manager. An attacker could leverage this key to decrypt sensitive data...
PT-2025-53301
Name of the Vulnerable Software and Affected Versions affected versions not specified Description A successful exploitation could result in access to the device. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2025-47138
Name of the Vulnerable Software and Affected Versions g33kyrash Online-Banking-System affected versions not specified Description A SQL injection issue exists due to the manipulation of the Username argument. The issue affects unknown code within the /index.php file and is remotely exploitable. T...
PT-2025-46666
Name of the Vulnerable Software and Affected Versions Autodesk 3ds Max affected versions not specified Description A specially crafted JPG file, when processed by Autodesk 3ds Max, can trigger an Out-of-Bounds Write condition. Successful exploitation of this issue could allow a malicious actor to...
PT-2025-46454
Name of the Vulnerable Software and Affected Versions Azure Monitor Agent affected versions not specified Description A heap-based buffer overflow exists in Azure Monitor Agent. This allows an unauthorized attacker to execute code locally. Recommendations At the moment, there is no information...
PT-2025-46466
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in Windows Remote Desktop where an untrusted pointer dereference can occur. A local attacker who successfully exploits this may be able to gain elevated privileges...
PT-2025-46478
Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use after free condition exists in the Windows Broadcast DVR User Service. This allows an authorized attacker to gain elevated privileges on a local system...
PT-2025-46488
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An issue exists in Microsoft Office Excel where an untrusted pointer dereference can allow an unauthorized attacker to disclose information over a network. Recommendations At t...