214356 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-71140
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...
PT-2026-79160
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A heap buffer overflow allows a local attacker to gain elevated privileges. A heap buffer overflow occurs when a program writes more data to a heap-allocated memo...
PT-2026-78888
The Events Made Easy plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.2.5 via the eme single event page template function. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrar...
PT-2026-79181
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A buffer overflow allows a remote attacker to cause a denial of service. A buffer overflow occurs when a program writes more data to a block of memory, or buffer,...
Linux Distros Unpatched Vulnerability : CVE-2026-63652
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.28.0, rdpsndserverrecvformats in channels/rdpsnd/server/rdpsndmain.c frees...
PT-2026-79033
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A time-of-check to time-of-use TOCTOU race condition exists, which could allow a local attacker to gain root privileges. A TOCTOU race condition occurs when a...
OMEN Gaming Hub – Potential Escalation of Privilege & Information Disclosure
A potential security vulnerability has been identified in the OMEN Gaming Hub for versions prior to 1101.2608.0.0. The vulnerability could potentially allow a local attacker to escalate privileges due to insufficient access controls. HP has identified affected versions and the minimum version tha...
CVE-2026-52021
100xdevs CMS v1.0 (by code100xDevs) contains an information disclosure vulnerability in the src/middleware.ts and src/app/api/mobile/search/route.ts components, allowing a remote, unauthenticated attacker to obtain sensitive information with no user interaction required. The vulnerability is rate...
PT-2026-79176
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A local attacker can cause a denial of service resulting from a NULL pointer dereference, which occurs when the software attempts to read or write to a memory...
PT-2026-79229
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A stack buffer overflow allows a remote attacker to execute arbitrary code. A stack buffer overflow occurs when a program writes more data to a buffer located on the stack...
PT-2026-79077
Mongoose is an embedded web server and network library. Prior to version 7.22, an on-path network attacker with a wildcard certificate for a parent domain can impersonate deeper subdomains to a client using the built-in TLS stack. The mg tls verify cert san and mg tls verify cert cn functions in...
PT-2026-79161
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A heap-based buffer overflow allows a local authenticated attacker to execute arbitrary code. A heap-based buffer overflow occurs when a program writes more data to a heap...
PT-2026-79237
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A local attacker can cause a denial of service through an out-of-bounds write, which occurs when data is written outside the intended memory boundary of a buffer...
PT-2026-79245
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description A local attacker can cause a denial of service by triggering uncontrolled resource consumption during the parsing of directory records. Recommendations At the moment, there ...
PT-2026-79230
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description An integer overflow allows a remote attacker to cause a denial of service. An integer overflow occurs when an arithmetic operation attempts to create a numeric...
PT-2026-79233
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A remote attacker could cause a denial of service due to a NULL pointer dereference, which occurs when a program attempts to read or write to a memory address tha...
The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.
The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2026-71127
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...
Linux Distros Unpatched Vulnerability : CVE-2026-71139
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable...
TrueConf Server Code Injection Vulnerability
TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...