CVE-2026-86315

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

CVE-2026-86315

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

EUVD-2026-72246

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

CVE-2026-86315

An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition whose instance initialization entry count exceeds UINT16MA...

PT-2026-86626

Name of the Vulnerable Software and Affected Versions Samsung Open Source Escargot version 5dc93606abd42b859045add05d704a038e197359 Description An out-of-bounds write occurs due to numeric truncation on Linux x86-64. An attacker capable of executing JavaScript can corrupt native memory and crash...

CVE-2025-46418

Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition...

EUVD-2025-210821

Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition...

CVE-2025-46418: Improper Neutralization of Special Elements used in an OS Command

Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition...

CVE-2025-46418

Westermo WeOS 5 (version 5.24 and later), an operating system deployed in industrial settings, is vulnerable to OS command injection through unsafe handling of media definitions . An attacker with administrative privileges can execute commands beyond their typical access rights, potentially compr...

CVE-2025-46418

Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition...

The vulnerability of DHCP servers for Windows operating systems allows attackers to increase their privileges.

The vulnerability of DHCP servers for Windows operating systems is related to incorrect definition of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of DHCP servers for Windows operating systems allows attackers to increase their privileges.

The vulnerability of DHCP servers for Windows operating systems is related to incorrect definition of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of DHCP servers for Windows operating systems allows attackers to increase their privileges.

The vulnerability of DHCP servers for Windows operating systems is related to incorrect definition of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2025-46418

Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition...

CVE-2026-82873

ToolJet through 3.0.0-ee-beta.2 contains authorization bypass vulnerabilities in the POST /api/v2/resources/export endpoint that allow authenticated users to disclose TooljetDB table schemas across workspace boundaries and export app definitions across granular permission boundaries. Attackers ca...

EUVD-2026-68408

ToolJet through 3.0.0-ee-beta.2 contains authorization bypass vulnerabilities in the POST /api/v2/resources/export endpoint that allow authenticated users to disclose TooljetDB table schemas across workspace boundaries and export app definitions across granular permission boundaries. Attackers ca...

EUVD-2026-67931

A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by defining a view whose evaluation reliably fails. The sampling logic classifies the resulting server message as transient and, after the configure...

CVE-2026-81490

A database user able to create a view in a namespace that MongoDB Connector for BI samples can cause the schema-sampling routine to stop functioning by defining a view whose evaluation reliably fails. The sampling logic classifies the resulting server message as transient and, after the configure...

CVE-2026-55634

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoint /pimcore-studio/api/class/definition/configuration-view/detail/id/import accepts a DataObject field name that is emitted without an identifier allowlist b...

CVE-2026-81490

MongoDB Connector for BI (mongosqld) contains an improper error handling flaw in its schema-sampling routine. A database user who can create a view in a sampled namespace can define a view whose evaluation reliably fails. The sampling logic misclassifies the resulting server message as transient ...