601196 matches found
EUVD-2026-58707
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...
CVE-2026-66270
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...
CVE-2026-66270
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution...
MINI-2736-63WH-2GPC
Bulletin has no description...
CVE-2026-66272
Dell Wyse Management Suite (WMS) affected: versions prior to 2605.0.2. CVE-2026-66272 describes a Missing Authentication for Critical Function vulnerability that allows an unauthenticated attacker with remote access to potentially disclose information (CVSS 3.1: 5.3, MEDIUM; AV:N/AC:L/PR:N/UI:N/S...
CVE-2026-63701
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...
CVE-2026-63701
Dell Wyse Management Suite versions prior to 2605.0.2 contain an Improper Deserialization of Untrusted Data flaw exploitable by a low-privileged local attacker to achieve privilege escalation. NVD rates it HIGH (CVSS 7.8). No active exploitation reported. Upgrade to 2605.0.2 via Dell DSA-2026-329.
CVE-2026-63702
Dell Wyse Management Suite (WMS) versions prior to 2605.0.2 are affected by CVE-2026-63702, a Use of Hard-coded Credentials vulnerability that allows a local, low-privilege attacker to gain unauthorized access. Root cause: hard-coded credentials. Impact is unauthorized access with high confidenti...
EUVD-2026-58681
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-63702
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-73555
A flaw was found in vLLM, an inference and serving engine for large language models. Unauthenticated attackers can send malformed JSON requests to various API endpoints, triggering validation errors. The system's error handling mechanism converts these validation errors into strings without...
CVE-2026-73559
A flaw was found in vLLM, an inference and serving engine for large language models. An authenticated API client can exploit this vulnerability by sending a single request to the /v1/completions endpoint with an excessively large list of prompts. This unbounded input causes the vLLM server to...
CVE-2026-73627
A flaw was found in JupyterLab. An authenticated user can bypass administrator lock rules in the plugin manager by making direct requests to the /lab/api/plugins endpoint. This allows them to enable or disable plugins that were locked, including child plugins and those locked via the 'lock all'...
CVE-2026-19835
Webkul Bagisto <= 2.4.4 is affected by a vulnerability in the Customer Item Deletion Endpoint that enables improper access controls. The issue affects an unknown function of this endpoint, can be exploited remotely, and the exploit is publicly available. The vendor notes some issues were ident...
EUVD-2026-58679
A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component Customer Item Deletion Endpoint. Such manipulation leads to improper access controls. The attack can be launched remotely. The exploit is publicly available an...
CVE-2026-19835 Webkul Bagisto Customer Item Deletion Endpoint access control
A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component Customer Item Deletion Endpoint. Such manipulation leads to improper access controls. The attack can be launched remotely. The exploit is publicly available an...
CVE-2026-13198 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in KUNBUS piControl
Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker to corrupt kernel heap and...
MINI-92X7-695J-FQVV
Bulletin has no description...