325696 matches found
EUVD-2026-57704
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...
CVE-2026-0290
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data...
MINI-CCQ8-PMG3-2G3W
Bulletin has no description...
MINI-FWPX-P9FJ-G84W
Bulletin has no description...
EUVD-2026-57600
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser...
PT-2026-71750
Name of the Vulnerable Software and Affected Versions Kibana affected versions not specified Description An uncaught exception in Kibana Cases allows for a denial of service through input data manipulation. This occurs because malformed link syntax stored in a case comment is not rejected or...
PT-2026-71694
Name of the Vulnerable Software and Affected Versions Data::MuForm::Localizer versions prior to 0.06 Description Remote code execution is possible because the load lexicon function interpolates the language attribute into the catalog filename without validating that it is a bare locale tag. An...
PT-2026-71925
Name of the Vulnerable Software and Affected Versions OpenChoreo versions prior to 1.0.3 OpenChoreo versions prior to 1.1.3 OpenChoreo versions prior to 1.2.0-rc.2 Description The internal/cluster-gateway/server.go component exposes the '/api/proxy/', '/api/exec/', and '/api/wirelogs/' endpoints ...
PT-2026-71598
Unauthenticated Sensitive Data Exposure in KiviCare = 4.5.1 versions...
Linux Distros Unpatched Vulnerability : CVE-2026-19518
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation. CVE-2026-19518 Note that Nessus...
PT-2026-71523
Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...
PT-2026-71600
Author Cross Site Scripting XSS in WP Data Access = 5.5.79 versions...
PT-2026-71487
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.5 PostgreSQL versions prior to 17.11 PostgreSQL versions prior to 16.15 PostgreSQL versions prior to 15.19 PostgreSQL versions prior to 14.24 Description Untrusted data inclusion in psql COPY may allow a server...
PT-2026-71809
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow...
PT-2026-71847
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management...
Malicious code in bs58-33 (npm)
npm/bs58-33 is a typosquat of the popular bs58 base58 codec cryptocoinjs. The package contains no malicious code of its own: its src/cjs/index.cjs simply does require"base65-33x" and re-exports it. Its sole purpose is to pull in the malicious sink package base65-33x as a runtime dependency declar...
PT-2026-71493
HCL AION is affected by a vulnerability where JavaScript responses containing data could be referenced by external pages, potentially allowing sensitive information to be captured by an attacker-controlled page JavaScript hijacking under certain conditions...
Linux Distros Unpatched Vulnerability : CVE-2026-6464
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection. If th...
Linux Distros Unpatched Vulnerability : CVE-2026-18408
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted data inclusion in pgdump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the...
ROS-20260813-73-0053
The vulnerability in Golang is related to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...