104991 matches found
EUVD-2026-68148
A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parserequest of the file tricksource/simservices/JSONVariableServer/JSONVariableServerThread.cpp of the component TCP Socket Handler. This manipulation causes stack-based buffer overflow...
CVE-2026-82478 NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflow
A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parserequest of the file tricksource/simservices/JSONVariableServer/JSONVariableServerThread.cpp of the component TCP Socket Handler. This manipulation causes stack-based buffer overflow...
CVE-2026-82592: Stack-based Buffer Overflow
A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely...
CVE-2026-82591: Heap-based Buffer Overflow
A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of the file code/AssetLib/MD5/MD5Loader.cpp. The manipulation of the argument iNewIndex leads to heap-based buffer overflow. The attack can...
CVE-2026-82478: Stack-based Buffer Overflow
A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parserequest of the file tricksource/simservices/JSONVariableServer/JSONVariableServerThread.cpp of the component TCP Socket Handler. This manipulation causes stack-based buffer overflow...
MiracleLinux 9 : gegl04-0.4.62-1.el9_8.1 (AXSA:2026-1690:01)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1690:01 advisory. gimp: GIMP: Arbitrary code execution via heap-based buffer overflow in HDR file parsing CVE-2026-2050 Tenable has extracted the preceding description block...
UBUNTU-CVE-2026-82470
Rodauth before 2.47.0 contains a time-based one-time password reuse vulnerability in the otp feature that fails to track the last accepted code timestamp. Attackers who observe a valid TOTP code can replay it during the drift window to bypass the second authentication factor...
CVE-2026-82474
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...
fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding
A flaw was found in fast-uri, a URI parser for Node.js. The component incorrectly decodes percent escapes in a hostname twice during URI parsing and authority recomposition. This double decoding can allow a remote attacker to manipulate a URI to point to a different network destination, such as a...
CVE-2026-82474: Protection Mechanism Failure
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...
CVE-2026-82474: Protection Mechanism Failure
Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enforcement and logging...
Unity Linux 20.1070a Security Update: libgcrypt (UTSA-2026-104991)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104991 advisory. Libgcrypt before 1.12.2 sometimes allows a heap-based buffer overflow and denial of service via crafted ECDH ciphertext to gcrypkdecrypt. Tenable has extracted the...
CVE-2026-70309
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-66324
External control of file name or path in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66798
Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-62904
Incorrect authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
EUVD-2026-42696
Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes...
GHSA-79CW-HFCC-7MW9 Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes
Summary An authenticated user extracts the admin password hash and any other database content through a time-based blind SQL injection in the DateFilter column key parameter. The POST /pimcore-studio/api/website-settings endpoint and 11 other listing endpoints accepts a columnFilters array where...
CVE-2026-70309
An origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. The CVSS 3.1 score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, indicating that exploitation requires user interaction and results in...
