61798 matches found
PT-2026-39941
Name of the Vulnerable Software and Affected Versions Axis affected versions not specified Description Improper input validation in a configuration file on the local file system could allow code execution and potentially lead to privilege escalation. This issue can only be exploited if an attacke...
PT-2026-39979
A vulnerability has been identified in blueplanet 100 NX3 M8 All versions, blueplanet 100 TL3 GEN2 All versions V6.1.4.9, blueplanet 105 TL3 All versions, blueplanet 105 TL3 GEN2 All versions V6.1.4.9, blueplanet 110 TL3 All versions, blueplanet 125 NX3 M11 All versions, blueplanet 125 TL3 All...
PT-2026-40182
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow in the Windows GDI Graphics Device Interface, which is the graphics subsystem of Windows, allows an unauthorized attacker to execute arbitrary code. This issue ca...
PT-2026-40442
PowerSYSTEM Center feature for device project groups allows an authenticated user with limited permissions to perform an unauthorized deletion of project groups...
PT-2026-41044
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168 Description A use after free issue in the Human Interface Device HID component allows a remote attacker to potentially perform a sandbox escape. This occurs when a user is convinced to perform...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a resource management vulnerability. This vulnerability stemmed from a reuse issue in the HID component after release, which could allow remote attackers to exploit the situation by...
Schneider Electric多款产品 安全特征问题漏洞
Schneider Electric Easergy MiCOM Px40 Series are products of Schneider Electric, a French company. The Schneider Electric Easergy MiCOM Px40 Series consists of a series of power protection and control relay devices. The Schneider Electric Easergy MiCOM C264 is an industrial communication gateway...
D-Link DNS-320 Operating System Command Injection Vulnerability (CNVD-2026-32583)
The D-Link DNS-320 is a dual-disk entry-level NAS network storage device launched by D-Link. The D-Link DNS-320 has an operating system command injection vulnerability. This vulnerability stems from multiple functions in the file/cgi-bin/networkmgr.cgi failing to properly validate user input...
D-Link DNS-320 operating system command injection vulnerability
The D-Link DNS-320 is a dual-disk entry-level NAS network storage device launched by D-Link. The D-Link DNS-320 has an operating system command injection vulnerability. This vulnerability stems from the chown function in webfilemgr.cgi, which fails to properly filter user input. Currently, no...
CVE-2026-20754: Improper Check for Unusual or Exceptional Conditions
Improper conditions check in some firmware for some IntelR NPU Drivers within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...
PT-2026-39938
ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if a...
PT-2026-51734
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the smc msg event tracepoint class, which is shared by smc tx sendmsg and smc rx recvmsg. The issue occurs because the system unconditionally...
KLA91038 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of...
AMD Device Metrics Exporter (ROCm ecosystem) Vulnerability
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Score ---|---|--- CVE-2026-0481| Unrestricted IP address binding in the AMD Device Metrics Exporter ROCm ecosystem could allow a remote attacker to perform unauthorized changes to the GPU configuration, potentially...
MINI-P846-867H-C45F
Bulletin has no description...
MINI-G9XW-2MHX-768P
Bulletin has no description...
CVE-2026-8345
A security vulnerability has been detected in D-Link DIR-816 1.10CNB05R1B011D88210. Affected by this issue is the function sub445E7C of the file /goform/singlePortForward. Such manipulation of the argument ipaddress leads to command injection. It is possible to launch the attack remotely. The...
MINI-W46H-24X5-MPFC
Bulletin has no description...