7857 matches found
CVE-2026-4206 D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This affects the function...
CVE-2026-4206 D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection
A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. This affects the function...
CVE-2026-4206
CVE-2026-4206 describes a remote command-injection flaw in multiple D-Link NAS/DVR devices (DNS-120 series, DNS-320/321/325/326/327L, DNS-340L, DNS-343/345, DNS-1100-4, DNS-1200-05, DNS-1550-04, DNR/DNS variants) affecting the disk-management CGI endpoint /cgi-bin/dsk_mgr.cgi. The vulnerability t...
Incorrect Authorization
Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Incorrect Authorization via the system.run. An attacker can execute unauthorized local code by obtaining approval for a benign script-runner command, then rewriting the referenced script ...
GHSA-8G75-Q649-6PV6 OpenClaw's system.run approvals did not bind mutable script operands across approval and execution
OpenClaw's system.run approval flow did not bind mutable interpreter-style script operands across approval and execution. A caller could obtain approval for an execution such as sh ./script.sh, rewrite the approved script before execution, and then execute different content under the previously...
This Android vulnerability can break your lock screen in under 60 seconds
A vulnerability in Android devices can allow attackers to gain access to a phone in less than a minute. The vulnerability, tracked as CVE-2026-20435, affects certain MediaTek SoCs System-on-a-Chip using Trustonic’s TEE Trusted Execution Environment. That may sound rare, but reportedly that’s abou...
virt:rhel and virt-devel:rhel security and bug fix update
An update is available for seabios, swtpm, perl-Sys-Virt, module.supermin, module.libiscsi, module.libvirt-dbus, libvirt-dbus, module.swtpm, module.virt-v2v, module.sgabios, module.perl-Sys-Virt, libvirt-python, module.libvirt-python, netcf, module.netcf, module.seabios, module.libguestfs, hivex,...
EUVD-2026-10595
Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...
EUVD-2026-10594
Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...
CVE-2026-23672
Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...
CVE-2026-23672
Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...
CVE-2026-23672
Windows Universal Disk Format File System Driver UDFS Elevation of Privilege Vulnerability...
CVE-2026-23672 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
...
CVE-2026-23672 Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
...
CVE-2026-23672
CVE-2026-23672 corresponds to a Privilege Elevation vulnerability in the Windows Universal Disk Format File System Driver (UDFS). The NVD entry confirms an Elevation of Privilege impact with a CVSS v3.1 base score of 7.8 (Local, Privileges Required: Low, No user interaction) and indicates a Windo...
Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
...
CVE-2026-27142 vulnerabilities
Vulnerabilities for packages: rancher-machine, terraform-provider-random, telegraf, crossplane-provider-aws-sqs, crossplane-provider-aws-ec2, spire-controller-manager, cert-manager, kubernetes, tempo, flux-image-reflector-controller, mesosphere-vsphere-csi, spicedb, kserve-modelmesh-serving,...
GHSA-J3GX-2473-5FP8 vulnerabilities
Vulnerabilities for packages: sbom-scorecard, kubernetes, azuredisk-csi, nri-mysql, actions-runner-controller, step, k8ssandra-operator, argo-events, nri-elasticsearch, grafana-operator, cert-exporter, terraform-provider-google, vt-cli, mariadb-operator, net-kourier, coredns, authservice,...
GHSA-J4J7-VW47-RHFQ vulnerabilities
Vulnerabilities for packages: beats-fips, spegel, eck-operator-fips, step-issuer, openfga, mc, aws-load-balancer-controller, dapr-fips, nvidia-container-toolkit, chronyexporter, external-dns, rancher-webhook, gitlab-pages, crossplane-provider-aws-ecr, prometheus-process-exporter, restic,...
CLEANSTART-2026-GJ95666 Redis is an open source, in-memory database that persists on disk
Multiple security vulnerabilities affect the redis package. Redis is an open source, in-memory database that persists on disk. See references for individual vulnerability details...