40044 matches found
CVE-2026-86926
A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause memory corruption, potentially leading to arbitrary code execution. This vulnerability is addressed in FileMaker Server version 26.0.3...
CVE-2026-86926
A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause memory corruption, potentially leading to arbitrary code execution. This vulnerability is addressed in FileMaker Server version 26.0.3...
EUVD-2026-85429
A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause memory corruption, potentially leading to arbitrary code execution. This vulnerability is addressed in FileMaker Server version 26.0.3...
CVE-2026-86926
A heap buffer overflow vulnerability exists in the FileMaker Server database engine block parsing routine. A maliciously crafted .fmp12 database file can trigger memory corruption, potentially resulting in arbitrary code execution . This issue is addressed in FileMaker Server version 26.0.3 . No ...
WordPress AI Engine plugin <= 3.7.8 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by foehn in WordPress Plugin AI Engine versions = 3.7.8...
Improper Neutralization of Special Elements Used in a Template Engine
Overview solspace/craft-freeform is a flexible and user-friendly form building plugin! Affected versions of this package are vulnerable to Improper Neutralization of Special Elements Used in a Template Engine via the rendering of submitted form field values in an isolated Twig context. An attacke...
CVE-2026-12974
A Security Policy Bypass vulnerability exists in Forcepoint Security Engine NGFW. This issue affects Forcepoint Security Engine NGFW: from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0...
CVE-2026-12974 Security Policy Bypass in Forcepoint Security Engine (NGFW)
A Security Policy Bypass vulnerability exists in Forcepoint Security Engine NGFW. This issue affects Forcepoint Security Engine NGFW: from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0...
EUVD-2026-85292
A Security Policy Bypass vulnerability exists in Forcepoint Security Engine NGFW. This issue affects Forcepoint Security Engine NGFW: from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0...
CVE-2026-12974 Security Policy Bypass in Forcepoint Security Engine (NGFW)
A Security Policy Bypass vulnerability exists in Forcepoint Security Engine NGFW. This issue affects Forcepoint Security Engine NGFW: from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0...
CVE-2026-12974
A Security Policy Bypass vulnerability exists in Forcepoint Security Engine (NGFW) . This issue affects versions 7.1.0 through 7.1.13 , 7.3.0 through 7.3.1 , 7.3.3 , 7.4.0 through 7.4.1 , and 7.5.0 . While the CVE is associated with Improper Validation of Specified Quantity in Input , specific te...
Safety-Aware Zero Trust Enforcement for IoT and Cyber-Physical Systems
Zero Trust ZT replaces the implicit trust of perimeter-based security with explicit, continuous, context-aware authorization. This shift is particularly relevant to IoT and cyber-physical systems, whose heterogeneous, long-lived, and remotely connected components make persistent trust untenable...
CVE-2026-93623: Authorization Bypass Through User-Controlled Key
Unauthenticated Insecure Direct Object References IDOR in AI Engine = 3.7.8 versions...
CVE-2026-86934: Authorization Bypass Through User-Controlled Key
An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege header to bypass the disabled Custom Web Publishing with XML setting and access the XML Web Publishing interface. This vulnerability is addressed in FileMaker Serv...
CVE-2026-86926: Heap-based Buffer Overflow
A heap buffer overflow vulnerability in the FileMaker Server database engine block parsing routine allowed a maliciously crafted .fmp12 database file to cause memory corruption, potentially leading to arbitrary code execution. This vulnerability is addressed in FileMaker Server version 26.0.3...
CVE-2026-73858: Improper Neutralization of Special Elements Used in a Template Engine
Solspace Freeform plugin for Craft CMS 5.x is a super flexible form-building tool. From 5.0.0 through 5.10.13, submitted values from public Freeform forms can be evaluated by the isolated Twig renderer when rendered into HTML attributes. An unauthenticated attacker can place Twig expressions in...
CVE-2026-12974: Improper Validation of Specified Quantity in Input
A Security Policy Bypass vulnerability exists in Forcepoint Security Engine NGFW. This issue affects Forcepoint Security Engine NGFW: from 7.1.0 through 7.1.13, from 7.3.0 through 7.3.1, 7.3.3, from 7.4.0 through 7.4.1, and 7.5.0...
CVE-2026-96604: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. This affects the function stripdata of the file engine/modules/search.php of the component Search Module. The manipulation of the argument story leads to sql injection. The attack can be initiated remotely. The exploit i...
PT-2026-97609
Name of the Vulnerable Software and Affected Versions SoftNews Media Group DataLife Engine version 18.0 Description An issue exists in the Search Module within the strip data function of the engine/modules/search.php file. A remote attacker can trigger a SQL injection by manipulating the story...