CVE-2026-28331

The SolarWinds Patch Manager software is susceptible to a Sensitive Information Exposure vulnerability (CWE-200). This flaw allows local users to access sensitive information, which could potentially be leveraged to gain elevated privileges . The vulnerability has a CVSS 3.1 base score of 4.4 (Me...

CVE-2026-28331 SolarWinds Patch Manager Sensitive Information Exposure Vulnerability

SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges...

CVE-2026-28331 SolarWinds Patch Manager Sensitive Information Exposure Vulnerability

SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges...

EUVD-2026-105173

SolarWinds Patch Manager exposes sensitive information accessible to local users, which could be used to gain elevated privileges...

Eclipse OpenJ9 buffer error vulnerability

Eclipse OpenJ9 versions 0.63.0 and earlier contain a security vulnerability. This vulnerability stems from improper boundary checks in the JITServer component during the processing of protocol messages and responses. It may allow unauthenticated remote attackers or malicious JITServer instances t...

Data Intelligence Lab@HKU Vibe-Trading path traversal vulnerability

Data Intelligence Lab@HKU Vibe-Trading versions 0.1.0 through 0.1.7 contain a path traversal vulnerability. This flaw stems from improper handling of paths in the LLM agent file reading tool; readdocument lacks proper sandbox checks, and the safeuserpath restriction can be bypassed. As a result,...

Apache bRPC authorization issue vulnerability

Apache bRPC versions 1.17.0 and earlier contain an authorization issue vulnerability. This vulnerability stems from improper authentication; remote unauthenticated attackers can send built-in HTTP requests on the same HTTP/1.1 keep-alive connection, thereby bypassing authentication for protected...

Apache bRPC authorization issue vulnerability

Versions of Apache bRPC prior to 1.18.0 contain an authorization issue vulnerability. This vulnerability stems from improper authorization checks; certain protobuf-based protocol distribution paths fail to enforce restrictions defined by the securitymode flag. As a result, remote attackers can...

Improper handling of exceptions in Apache bRPC

Versions of Apache bRPC prior to 1.18.0 contain an improper exception handling vulnerability. This vulnerability arises from a failure in assertion checks regarding the payload of feedback frames during the processing of FRAMETYPEFEEDBACK frames by the streaming functionality. Unauthenticated...

oretnom23 file-management-system-php input validation error vulnerability

The oretnom23 file-management-system-php has a security vulnerability. This vulnerability stems from improper handling of the name, username/password/type/id parameters in the saveuser function within the adminclass.php file of the User Account Management component. It may lead to SQL injection,...

NTPsec buffer error vulnerability

Versions NTPsec 1.1.4 through 1.2.5 contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds read during the parsing of NTS extension fields. Remote attackers can exploit this by providing an NTS Authenticator and Encrypted Extension Fields AEEF field with an excessive...

SourceCodester food order management system authorization issue vulnerability

The SourceCodester food order management system version 1.0 contains an authorization issue vulnerability. This vulnerability stems from a lack of authorization in the Admin Endpoint component, potentially allowing remote attackers to gain unauthorized access...

D-Link DHP-W610AV Trust Management Vulnerability

The D-Link DHP-W610AV 1.02EUb03 version has a trust management vulnerability. This vulnerability stems from incorrect handling of the parameter “Password” in the “loginpreparehnap” function of the HNAP Login component. As a result, the password in the configuration file may become empty, allowing...

Cisco Open Source Snort3 Resource Management Error Vulnerability

Cisco Open Source Snort3 and Cisco Secure Firewall Threat Defense FTD software have a resource management vulnerability. This vulnerability stems from incomplete error checks during Snort 3’s processing of files, which may lead to unreleased memory. A remote attacker without authentication can...

Oretnom23 File-Management-System-php authorization issue vulnerability

The oretnom23 file-management-system-php versions 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e4 and earlier contain an authorization issue vulnerability. This vulnerability stems from the lack of authentication for the ID parameter in the deletefolder function within ajax.php, potentially allowing...

Cisco Open Source Snort3 buffer error vulnerability

Cisco Open Source Snort3 contains a buffer error vulnerability. This vulnerability stems from the lack of error checking in the Snort 3 SMTP MIME Decoder when parsing the SMTP header’s MIME field. As a result, unauthenticated remote attackers can send specially crafted SMTP packets over an...

Cisco Secure Client input validation error vulnerability

Cisco Secure Client versions 4.9.00086, 4.9.01095, 4.9.02028, 4.9.03047, 4.9.03049, 4.9.04043, 4.9.04053, 4.9.05042, 4.9.06037, 4.10.00093, 4.10.01075, 4.10.02086, 4.10.03104, 4.10.04065, 4.10.04071, 4.10.05085, 4.10.05095, 5.0.00238, 4.10.05111, 5.0.00529, 5.0.00556, 4.10.06079, 5.0.01242,...

Cisco TelePresence Video Communication Server Expressway Postback Vulnerability

The Cisco TelePresence Video Communication Server Expressway has a post-release vulnerability due to improper link resolution. This vulnerability may be exploited by local, low-privilege attackers, resulting in compromised confidentiality, integrity, and availability...

Cisco Open Source Snort3 Authorization Issue Vulnerability

The Cisco Open Source Snort3 has an authorization issue vulnerability. This vulnerability stems from the lack of authentication in the control channel socket implementation. It may allow authenticated, low-privilege local attackers to execute arbitrary commands as the Snort 3 process user, and to...

Improper NTPsec exception handling vulnerability

Versions NTPsec 1.1.4 through 1.2.5 contain an improper exception handling vulnerability. This vulnerability arises when excessive NTN Cookie Placeholder extension fields in NTS requests trigger a reachability exit, potentially allowing remote attackers to terminate the daemon...