5455129 matches found
IServ Schoolserver User Enumeration
IServ Schoolserver suffers from a user enumeration vulnerability. The vendor does not feel this is an issue...
CVE-2026-70408
An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges...
CVE-2026-70408
An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileges...
CVE-2026-66358
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script...
CVE-2026-66358
A cross-site scripting vulnerability exists in acmailer, which may allow an attacker to execute an arbitrary script...
Exploit for Use After Free in Linux Linux_Kernel
S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 — Achieved SELi...
EUVD-2026-62231
When the JAILATDESC flag is specified, kernjailset and kernjailget released the reference to the caller's current prison before looking up the jail descriptor. If the descriptor lookup failed, error-handling paths released the same reference a second time. An unprivileged local user can trigger a...
EUVD-2026-62230
The Atarim – AI Agency for WordPress: Edit Pages, Fix Code, Update Plugins, SEO & Client Feedback plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the AVCFAbilitiesMedia::register replace-media-file executecallback function in all versions ...
Exploit for Deserialization of Untrusted Data in Citrix Session_Recording
cve-id Donate Support the maintenance of this project wit...
CVE-2026-76050
A vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This impacts an unknown function of the file /admin/ajax.php?action=deletemenu. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been made...
CVE-2026-76049
A vulnerability has been found in SourceCodester Simple Online Food Ordering System 1.0. This affects an unknown function of the file /admin/ajax.php?action=savemenu. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
EUVD-2026-62229
When msyncMSINVALIDATE is called on a mapping of an unmanaged device object, the physical pages in the mapping range are marked invalid but remain in the pager's page list. A subsequent page fault will cause the fault handler to re-insert the page into the object's list. This corrupts the list, a...
Exploit for CVE-2026-56848
CVE-2026-56848 NVD Description A flaw in Node.js HTTP/2...
gstreamer: gstreamer: DTLS certificate Subject DN stack buffer overflow in openssl_verify_callback
A stack buffer overflow vulnerability was found in GStreamer's DTLS plugin. During a DTLS handshake, the peer certificate Subject Distinguished Name is printed into a fixed-size 2048-byte stack buffer without bounds checking. A remote unauthenticated attacker can send a certificate with an...
Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...
gstreamer: gstreamer: rfbsrc/librfb Hextile heap out-of-bounds write with 16bpp framebuffer
A heap buffer overflow vulnerability was found in GStreamer's rfbsrc plugin. When a client connects to a malicious RFB/VNC server that advertises a 16bpp framebuffer and sends Hextile-encoded updates, the Hextile background fill path writes 32-bit pixel values into a buffer allocated for 16-bit...
ROOT-APP-NPM-CVE-2026-42033 CVE-2026-42033 in axios - Patched by Root
Root has patched CVE-2026-42033 in the axios package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-25639 CVE-2026-25639 in axios - Patched by Root
Root has patched CVE-2026-25639 in the axios package for Root:npm. Multiple fixed versions available...