62636 matches found
FreeBSD-SA-26:72.bhyve
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-26:72.bhyve Security Advisory The FreeBSD Project Topic: Multiple vulnerabilities in bhyve device models Category: core Module: bhyve Announced: 2026-10-14...
Ubuntu 24.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8911-1)
The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8911-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...
PT-2026-114365
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the qla2xxx SCSI driver where the qla2x00 alloc iocbs function uses a standard memset to clear the producer slot of the QLAFX00 request ring. Because the request ring...
ROS-20261014-73-0006
The vulnerability of the handleTransactionDone function in the drivers/char/ipmi/ipmisiintf.c file of the Linux operating system’s alphabetic device driver lies in the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...
VulnCheck KEV: CVE-2026-39949
Cacti ≤ 1.2.30 has an authenticated OS command injection flaw. Users with device and graph template creation privileges can put shell metacharacters in a device’s notes field. Cacti’s variable replacement engine inserts that field, unsanitized, into RRDtool command-line arguments through the...
CVE-2026-108473: Missing Authentication for Critical Function
Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol. An unauthenticated adjacent attacker may send management instructions to an affected device without adequate authentication or authorization, allowing modification of the device state o...
Network Device Enrollment Service Code Execution
The vulnerability of the Network Device Enrollment Service NDES for Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
LibreNMS device wireless.inc.php Privilege Escalation
The vulnerability in the device/wireless.inc.php script of the LibreNMS network monitoring system relates to the lack of security measures for the website structure. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information and increase their...
Copeland XWEB and XWEB Pro Improper Neutralization of Special Elements Used in an OS Command (CVE-2026-20764)
An OS Command injection vulnerability exists in XWEB Pro version 1.12.1 and prior, enabling an authenticated attacker to achieve remote code execution on the system by providing malicious input via the device hostname configuration which is later processed during system setup, resulting in remote...
CVE-2026-96866
Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...
CVE-2026-96861
Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...
CVE-2026-96854
Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...
CVE-2026-96855
Improper access control in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...
CVE-2026-96850
Use of uninitialized resource in Windows Modern Device Management MDM allows an authorized attacker to disclose information locally...
CVE-2026-88133
Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally...
CVE-2026-85927
Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-85918
Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...
CVE-2026-85904
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...