Wireshark 4.4.x < 4.4.14 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 4.4.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.14 advisory. - RF4CE Profile protocol dissector crash in Wireshark 4.6.0 to 4.6.3 and 4.4.0 to 4.4.13 allows denial of servic...

Fonoster 安全漏洞

Fonoster is a cloud communication platform developed by Fonoster. Versions of Fonoster prior to 0.6.1 contained security vulnerabilities. These vulnerabilities were caused by directory traversal vulnerabilities in the VoiceServer endpoints, which could lead to the reading of arbitrary files...

WordPress plugin MediCenter 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. The WordPre...

OpenClaw 安全漏洞

OpenClaw is an open-source intelligent artificial assistant. Versions of OpenClaw prior to 2026.2.13 had security vulnerabilities. These vulnerabilities stemmed from the use of non-constant time string comparisons in hook token verification, which could allow attackers to infer tokens through...

PT-2026-23141

Name of the Vulnerable Software and Affected Versions Keenarch versions prior to 2.0.1 Description Keenarch is susceptible to a file upload issue that permits the use of malicious files. The vulnerability allows for unrestricted uploads of files with dangerous types. Recommendations Update Keenar...

RustDesk Server PRO 安全漏洞

RustDesk Server PRO is a set of remote desktop server management scripts developed by RustDesk’s individual developers. Versions of RustDesk Server PRO prior to 1.7.5 contained security vulnerabilities, which stemmed from the transmission of sensitive information in plain text, potentially allowi...

Gogs（Go Git Service） 数据伪造问题漏洞

Gogs Go Git Service is a Go-based self-service Git hosting service developed by the Gogs team. It supports creating and migrating public/private repositories, as well as adding and removing repository collaborators. Prior to version 0.14.2 of Gogs Go Git Service, there was a data manipulation...

PT-2026-23584

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 17 Linux, Windows versions prior to build 41186 Description The software suffers from a flaw related to improper authentication, leading to potential sensitive information disclosure and manipulation. The issue allows for...

zlib 安全漏洞

Zlib is a general-purpose data compression library developed by Mark Adler in the United States. Versions of Zlib prior to 2.219 contained security vulnerabilities, which stemmed from the use of potentially insecure versions of the Zlib library...

CVE-2026-28427

OpenDeck is Linux software for your Elgato Stream Deck. Prior to 2.8.1, the service listening on port 57118 serves static files for installed plugins but does not properly sanitize path components. By including ../ sequences in the request path, an attacker can traverse outside the intended...

CVE-2026-28434 cpp-httplib's default exception handler leaks e.what() to clients via EXCEPTION_WHAT response header

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to 0.35.0, when a request handler throws a C++ exception and the application has not registered a custom exception handler via setexceptionhandler, the library catches the exception and writes its message...

CVE-2026-3541

CVE-2026-3541 describes an out-of-bounds memory read in Chrome’s CSS handling due to an inappropriate implementation in CSS code. A remote attacker could exploit this via a crafted HTML page to trigger a memory read, with a High impact as indicated by multiple sources. Public postings and advisor...

CVE-2026-3536

Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Critical...

EUVD-2026-9412

Dell Device Management Agent DDMA, versions prior to 26.02, contain a Plaintext Storage of Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized Access...

CVE-2026-26949

Dell Device Management Agent DDMA, versions prior to 26.02, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-26949

Dell Device Management Agent DDMA, versions prior to 26.02, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-26949

Dell Device Management Agent (DDMA) vulnerability CVE-2026-26949 affects DDMA versions prior to 26.02. The issue is described as Incorrect Authorization that could allow a low-privileged, local attacker to elevate privileges. Exploitation details, affected platforms, and remediation are not provi...

CVE-2025-59784

2N Access Commander version 3.4.1 and prior is vulnerable to log pollution. Certain parameters sent over API may be included in the logs without prior validation or sanitisation. This vulnerability can only be exploited after authenticating with administrator privileges...

CVE-2026-22285

Dell Device Management Agent DDMA, versions prior to 26.02, contain a Plaintext Storage of Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized Access...

CVE-2026-23234

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fswriteendio As syzbot reported an use-after-free issue in f2fswriteendio. It is caused by below race condition: loop device umount - workerthread - loopprocesswork - doreqfilebacked - lorwaio -...