2117 matches found
EUVD-2025-210914
An issue in Prolink 13A Smart Plug Model Version: DS-3202M-UKv3 Wi-Fi and Application Version mEzee 2.6.7 allows attackers to cause a Denial of Service DoS or connection to an attacker-controlled device via supplying a crafted packet during the provisioning phase...
MiracleLinux 8 : 389-ds:1.4 (AXSA:2026-1839:01)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1839:01 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...
CVE-2017-7921-EXPLOIT
CVE-2017-7921 - Vulnerabilidad de Autenticación Inadecuada en la Serie de Cámaras Hikvision Una falla de seguridad identificada como CVE-2017-7921 que afecta a varios modelos de cámaras Hikvision. La vulnerabilidad fue descubierta en los dispositivos de las series DS-2CD2xx2F-I V5.2.0 build 14072...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: net: phy: It is now possible to allow the MDIO bus’s PM operations to initiate/stop the state machine for the phylink-controlled PHY. There are two types of DSA drivers: 1. Those that call dsaswitchsuspend and dsaswitchresume...
Astra Linux – Vulnerability in Mariadb 10.3
MariaDB Server before version 10.7 is vulnerable to Denial of Service attacks. In the file extra/mariabackup/dscompress.cc, when an error occurs i.e., transitioning to the err label during the execution of the createworkerthreads method, the held lock thd-ctrlmutex is not released properly. This...
Astra Linux – Vulnerability in the 389-DS-base
A flaw has been discovered in 389-ds-base versions 1.4.x.x prior to 1.4.1.3. When executed in verbose mode, the dscreate and dsconf commands may display sensitive information, such as the Directory Manager password. An attacker who can view the screen or record the terminal’s standard error outpu...
AlmaLinux 10 : 389-ds-base (ALSA-2026:64785)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64785 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...
MiracleLinux 9 : 389-ds-base-2.8.0-10.el9_8 (AXSA:2026-1821:07)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1821:07 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...
CVE-2026-81402
The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code...
CVE-2026-81402 DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload
The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code...
EUVD-2026-76784
The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code...
CVE-2026-81402
The DS Ad Rotator WordPress plugin (through version 0.8 ) lacks any capability check , nonce verification , or file-type validation on its image upload handler. This allows unauthenticated attackers to upload arbitrary files—including PHP —to a web-accessible directory, enabling remote code execu...
389-ds-3.3.1+8c2711bd6-1.1 on GA media (moderate)
389-ds-3.3.1+8c2711bd6-1.1 on GA media Announcement ID: openSUSE-SU-2026:11739-1 Rating: moderate Cross-References: CVE-2026-11770 CVE-2026-15722 CVE-2026-18355 CVE-2026-18453 CVE-2026-18663 CVE-2026-18922 CVE-2026-19843 CVE-2026-76560 CVSS scores: CVE-2026-11770 SUSE : 7.5...
EUVD-2026-75783
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an outbound fetch originating from a shared-infrastructure pod, and the WSDL body is reflected verbatim to the caller. The ds-canvas pod sits ...
CVE-2026-81207
IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) in the ds-canvas pod , a shared-infrastructure pod on the OpenShift overlay. Any authenticated tenant—regardless of project membership or role—can fully control the scheme, host, port...
CVE-2026-81207 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows any authenticated tenant — with no project membership or role — fully controls scheme/host/port/path of an outbound fetch originating from a shared-infrastructure pod, and the WSDL body is reflected verbatim to the caller. The ds-canvas pod sits ...
OPENSUSE-SU-2026:11739-1 389-ds-3.3.1+8c2711bd6-1.1 on GA media
These are all security issues fixed in the 389-ds-3.3.1+8c2711bd6-1.1 package on the GA media of openSUSE Tumbleweed...
AlmaLinux 9 : 389-ds-base (ALSA-2026:64784)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64784 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...
Oracle Linux 8 : ELSA-2026-64791-0: / 389-ds:1.4 (ELSA-2026-647910)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647910 advisory. - Resolves: RHEL-222326 - EMBARGOED CVE-2026-18453 389-ds:1.4/389-ds-base: 389-ds-base: pre-authentication NULL pointer dereference via paged results...
