37641 matches found
Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection
Visual Tools DVR VX16 4.2.28.0 could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2021-42071 info: name: Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection author: gy741 severity: critical description: Visual...
CVE-2026-44092
A flaw was found in ModbusServer. An unauthenticated remote attacker can inject malicious input into the application due to a lack of input validation when fetching data from MQTT. This vulnerability may lead to a loss of data integrity and system availability...
CVE-2026-67585 Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_federation
Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthefederation allows an unauthenticated remote attacker to abort the Erlang VM via crafted entities representation keys. Every key of every object in the representations argument of the federation-mandated...
CVE-2026-67585
The CVE-2026-67585 entry concerns DivvyPayHQ absinthe_federation. An unauthenticated remote attacker can cause the Erlang VM to abort by crafting _entities representation keys. The root cause is that every key in representations is converted to an atom via String.to_atom/1, and since representati...
CVE-2026-16439
A flaw was found in Eclipse OpenJ9. When using the -Xtrace option to trace method arguments, a buffer underflow vulnerability can occur. This could potentially lead to memory corruption, impacting the integrity and availability of the application...
ROOT-OS-DEBIAN-13-CVE-2025-68307 CVE-2025-68307 in linux - Patched by Root
Root has patched CVE-2025-68307 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-71113 CVE-2025-71113 in linux - Patched by Root
Root has patched CVE-2025-71113 in the linux package for Root:Debian:13. Multiple fixed versions available...
CVE-2026-48078
OpenReception’s CVE-2026-48078 affects the scheduling endpoint prior to version 1.0.5. The unauthenticated /api/tenants/{id}/schedule endpoint exposed all non-archived channels for a tenant, including those with isPublic = false, disclosing channel names, descriptions, IDs, agent associations, pa...
CVE-2026-48078 OpenReception's schedule endpoint discloses isPublic=false channels and slot availability to unauthenticated callers
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.5, the unauthenticated /api/tenants/id/schedule endpoint returns every non-archived channel for a tenant regardless of the channel's isPublic flag. Channels marked...
CVE-2026-48078 OpenReception's schedule endpoint discloses isPublic=false channels and slot availability to unauthenticated callers
OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.5, the unauthenticated /api/tenants/id/schedule endpoint returns every non-archived channel for a tenant regardless of the channel's isPublic flag. Channels marked...
Moderate: Red Hat Security Advisory: General availability of the satellite/iop-advisor-backend-rhel9 container image
A new satellite/iop-advisor-backend-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...
Important: Red Hat Security Advisory: General availability of the satellite/iop-remediations-rhel9 container image
A new satellite/iop-remediations-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, an...
Moderate: Red Hat Security Advisory: General availability of the satellite/iop-host-inventory-rhel9 container image
A new satellite/iop-host-inventory-rhel9 container image is now generally available in the Red Hat container registry. Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services,...
ROOT-OS-UBUNTU-2404-CVE-2025-40192 CVE-2025-40192 in linux - Patched by Root
Root has patched CVE-2025-40192 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-38063 CVE-2025-38063 in linux - Patched by Root
Root has patched CVE-2025-38063 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-43165 CVE-2026-43165 in linux - Patched by Root
Root has patched CVE-2026-43165 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2026-53270 CVE-2026-53270 in linux - Patched by Root
Root has patched CVE-2026-53270 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2404-CVE-2025-38696 CVE-2025-38696 in linux - Patched by Root
Root has patched CVE-2025-38696 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...