214496 matches found
PT-2026-76865
Name of the Vulnerable Software and Affected Versions hermes-studio version 0.6.26 Description A directory traversal issue allows a remote attacker to obtain sensitive information. This occurs through the validatePath function within the 'api/hermes/download' endpoint. Directory traversal is a fl...
PT-2026-76774
An issue in ACME mini httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handle request function...
PT-2026-76772
File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code...
CVE-2026-39255
A buffer overflow in SteelSeries GG v107.0.0 for macOS, located in the libSSEdevice.dylib library's dup_wcs function, allows an unauthenticated remote attacker to execute arbitrary code. CVSS 9.8 (Critical); no patch or exploit code is mentioned in the provided documents.
CVE-2026-68005
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
EUVD-2026-60355
Cross Site Scripting vulnerability in Squirro Cognitive Search 3.14.2 allows a remote attacker to execute arbtirary code via the Email Notification, Create Evaluation Sets and HTML Editor functions...
PT-2026-73261
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
The vulnerability of the net/core/gro.c component in the Linux operating system’s kernel allows a hacker to cause a service failure.
The vulnerability of the net/core/gro.c component in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
The vulnerability of the Apache Tomcat application server, related to insufficient input validation, allows attackers to execute arbitrary code.
The vulnerability of the Apache Tomcat application server is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EUVD-2026-60350
Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - 04/2026 allows a remote attacker to obtain sensitive information and execute arbitrary code...
CVE-2026-50774
GAPTEQ Designer v.3.5 has a privilege escalation flaw exploitable via the "Company Manger" role. CISA SSVC flags it as automatable with total technical impact; a proof-of-concept exists in the Henkel-CyberVM GitHub repository. No patched version or remediation details are provided in the availabl...
PT-2026-73279
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...
PT-2026-73266
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
PT-2026-73271
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
PT-2026-73277
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-73269
Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...
PT-2026-73276
Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network...
CVE-2026-68005
An issue in ACME minihttpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the handlerequest function...
PT-2026-76785
Name of the Vulnerable Software and Affected Versions Budibase versions prior to 3.41.3 Description An authenticated published-app user with the BASIC role can provide attacker-controlled bucket and key values to the 'POST /api/attachments/:datasourceId/url' endpoint. This allows the user to obta...