311041 matches found
CVE-2026-21120: Use After Free
Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege...
HPESBNS05148 rev.1 - HPE NonStop Servers, Multiple Vulnerabilities
Potential Security Impact: Local: Denial of Service DoS, memory corruption, Buffer Overflow, Stack Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. NONSTOP KERNEL T9050 - T9050L02^BBP, T9050L02^BBS EXPAND T9057 - T9057L02^AIG and earlier XDR Streams T0248 - T0248L01^AAD an...
EulerOS 2.0 SP13 : apr-util (EulerOS-SA-2026-4029)
According to the versions of the apr-util packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons,...
PT-2026-110429
Name of the Vulnerable Software and Affected Versions westboy CicadasCMS versions prior to 2431154dac8d0735e04f1fd2a3c3556668fc8dab Description An issue exists in the Template Management component within the TemplateController.input function of the /system/cms/template/input file. Remote...
PT-2026-110427
A vulnerability was identified in deepseek-ai deepseek-harness up to 0.1.1-rc.2. This affects the function agent of the component dsh-workflow-worker-thread. The manipulation leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The exploit is publicly...
PT-2026-110422
Name of the Vulnerable Software and Affected Versions deepseek-ai deepseek-harness versions prior to 0.1.1-rc.2 Description A flaw exists in the spawn function of the Sandbox component. Manipulating the Profile argument allows an attacker to cause a sandbox issue, which can be executed on the loc...
PT-2026-110357
A security flaw has been discovered in erzhongxmu JEEWMS up to 2026.09.27-W39. Affected by this vulnerability is the function WmToMoveGoodsController.list of the file src/main/java/com/zzjee/wm/controller/WmToMoveGoodsController.java of the component PDA Interface. Performing a manipulation of th...
PT-2026-110472
A security vulnerability has been detected in y project RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely. The vendor was contacted ear...
PT-2026-110475
A flaw has been found in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe. Affected by this vulnerability is the function mysql query of the file source/loginprocessing.php of the component Login Handler. This manipulation of the argument email/password causes s...
PT-2026-110452
Name of the Vulnerable Software and Affected Versions libsimba.heifdec.media.samsung.so versions prior to SMR Oct-2026 Release 1 Description Improper input validation occurs when retrieving a cover image within the libsimba.heifdec.media.samsung.so library, which may allow a local attacker to...
PT-2026-110457
Improper input validation in GuestCreditCardRegisterActivity of Samsung Checkout prior to version 5.1.03.1 allows local attackers to launch an arbitrary activity with Samsung Checkout privileges...
PT-2026-110444
Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to write out-of-bounds memory...
PT-2026-110449
Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs...
PT-2026-110465
Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...
PT-2026-110447
Name of the Vulnerable Software and Affected Versions lib sag ai sound sep v2.00.so versions prior to SMR Oct-2026 Release 1 Description An out-of-bounds read and write issue exists in the lib sag ai sound sep v2.00.so library. This flaw allows local attackers to read and write memory outside the...
PT-2026-110463
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...
PT-2026-110451
Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with root privilege to access data of the tied profile in before first unlock...
PT-2026-110445
Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information...