197767 matches found
PT-2026-65014
Improper control of generation of code 'code injection' in .NET Framework allows an unauthorized attacker to elevate privileges locally...
PT-2026-65017
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
Siemens SIMATIC S7-1500 CPU 1518 MFP NULL Pointer Dereference (CVE-2026-23398)
This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid505566; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...
EUVD-2026-49355
SQLite 3.41 has a use-after-free vulnerability exists in the expression evaluation logic. The sqlite3ReleaseTempReg function improperly releases temporary register resources, and the subsequent exprComputeOperands function continues to access the already freed register memory. By supplying a...
PT-2026-65058
WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author not in parameter of WP Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter...
CVE-2026-51564
Milk admin ≤0.9.8 is affected by an open redirect via the redirect parameter. A crafted request can redirect users to arbitrary external URLs. Root cause: improper handling of the redirect parameter in Milk admin. Impact: potential user redirection with network access implications; CVSS v3.1 base...
PT-2026-65009
Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network...
PT-2026-65015
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-64985
A use-after-free UAF vulnerability was discovered in the core parsing component of SQLite 3.41. The flaw occurs because the program frees an ExprList object via sqlite3ExprListDelete and then subsequently accesses the dangling pointer of the released object. A remote adversary can supply speciall...
CVE-2026-51077
SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...
PT-2026-64897
The lack of cryptographic mechanisms to ensure the integrity and authenticity of communications in Ghost Robotics' Vision 60 robot APK v5.5.0 exposes the system to man-in-the-middle attacks. An attacker located on the local network can use ARP spoofing and selective traffic blocking techniques to...
PT-2026-65004
Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network...
PT-2026-65008
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...
PT-2026-65028
Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network...
PT-2026-65003
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-65019
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
EUVD-2026-49354
A use-after-free vulnerability exists in the expression parsing and memory management logic of SQLite 3.41. After invoking sqlite3ExprDelete to release an expression object, the program still retains the dangling pointer and subsequently accesses member fields of the already freed memory. By...
PT-2026-65033
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...