11917 matches found
The vulnerability of the Blueprint::isSafeDynamicCall() method in the Grav CMS system allows a perpetrator to gain unauthorized access to read, create, and copy files and directories.
The vulnerability of the Blueprint::isSafeDynamicCall method in the Grav CMS system is related to improper code generation management. Exploiting this vulnerability can allow an attacker to gain unauthorized access to read, create, and copy files and directories...
Linux Distros Unpatched Vulnerability : CVE-2026-71191
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Swift through 2.38.0, S3API middleware does not enforce that semantic x-amz- headers are covered by the SigV4 signature on presigned URL requests. ...
Linux Distros Unpatched Vulnerability : CVE-2026-71192
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swift-native control headers X-Copy-From, X-Copy-From-Account from S3 API requests whe...
The vulnerability of the SCP utility in the OpenSSH cryptographic security tool allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the SCP utility in the OpenSSH cryptographic security tool is related to improper storage of permissions. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...
CVE-2026-15314
Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authenticated HTTP request bodies due to insufficient input validation before memory copy operations. This may lead to buffer overflow condition, causing the web service process to crash...
CVE-2026-24080 Buffer Copy Without Checking Size of Input in Biometrics
Memory Corruption when handling malformed request parameters in the fingerprint TA...
CVE-2026-24076 Buffer Copy Without Checking Size of Input in Bluetooth HOST
Memory Corruption when processing registry values with incorrect types using a direct query method...
CVE-2026-24076
Technical details for CVE-2026-24076 are not publicly available in the provided documents. No affected products, components, versions, vectors, or fixes are disclosed. Monitor for updates from the sources in the initial entry.
CVE-2026-24076 Buffer Copy Without Checking Size of Input in Bluetooth HOST
Memory Corruption when processing registry values with incorrect types using a direct query method...
CLSA-2026-1773965918 TuxCare security update for copy-anything (1 CVE)
TuxCare rebuilt copy-anything to address 1 CVE. Fixed in 2.0.6-tuxcare.1...
CVE-2026-58080
In Eclipse Milo versions 1.0.0 through 1.1.4, OpcUaServerConfig.copy fails to preserve a configured RoleMapper. On servers that rely on role permissions and construct the running configuration through copy, sessions receive no role IDs and the default access controller skips role-permission check...
CVE-2026-58080
In Eclipse Milo versions 1.0.0 through 1.1.4, OpcUaServerConfig.copy fails to preserve a configured RoleMapper. On servers that rely on role permissions and construct the running configuration through copy, sessions receive no role IDs and the default access controller skips role-permission check...
CVE-2026-58080
In Eclipse Milo versions 1.0.0 through 1.1.4, OpcUaServerConfig.copy fails to preserve a configured RoleMapper. On servers that rely on role permissions and construct the running configuration through copy, sessions receive no role IDs and the default access controller skips role-permission check...
CVE-2026-58080
Eclipse Milo 1.0.0–1.1.4 contains a bug in OpcUaServerConfig.copy() that fails to preserve a configured RoleMapper. On servers building running config via copy(), sessions may have no role IDs, causing the default access controller to skip role-permission checks. This enables an anonymous client ...
CVE-2026-58080
In Eclipse Milo versions 1.0.0 through 1.1.4, OpcUaServerConfig.copy fails to preserve a configured RoleMapper. On servers that rely on role permissions and construct the running configuration through copy, sessions receive no role IDs and the default access controller skips role-permission check...
EUVD-2026-52663
In Eclipse Milo versions 1.0.0 through 1.1.4, OpcUaServerConfig.copy fails to preserve a configured RoleMapper. On servers that rely on role permissions and construct the running configuration through copy, sessions receive no role IDs and the default access controller skips role-permission check...
CVE-2026-58080
In Eclipse Milo versions 1.0.0 through 1.1.4, OpcUaServerConfig.copy fails to preserve a configured RoleMapper. On servers that rely on role permissions and construct the running configuration through copy, sessions receive no role IDs and the default access controller skips role-permission check...
CVE-2026-64564
CVE-2026-64564 concerns a Linux kernel SCTP DEL-IP processing bug. The vulnerability arises because sctp_process_asconf() caches the ASCONF transport in asconf->transport (tied to chunk->transport) and that transport can be different from the packet source address when looked up via __sctp_...
