8870 matches found
MINI-FC8J-R348-WG3V
Bulletin has no description...
CGA-8MF6-WJX6-FGJX
Bulletin has no description...
MINI-RHV7-XRG3-2562
Bulletin has no description...
CVE-2026-44091
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss...
CLEANSTART-2026-TW92291 Security fixes in dex 2.44.0-r1
Package dex version 2.44.0-r1 fixes 2 vulnerabilities: ghsa-78h2-9frx-2jm8, CVE-2026-34986...
CLEANSTART-2026-DC00064 Security fixes in sonarqube 26.3.0.120487-r1
Package sonarqube version 26.3.0.120487-r1 fixes 1 vulnerabilities: CVE-2026-42198...
CVE-2026-44091 Creation of a new configuration by posting a malicious ID to MQTT
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss...
EUVD-2026-51026
An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss...
CVE-2026-44091
CVE-2026-44091 describes an unauthenticated remote attacker who can post a malicious ID to the MQTT Broker, causing the creation of a new configuration entry in the system configuration. This may lead to integrity and availability loss. The published CVSS metrics indicate a high severity: CVSS 4....
CVE-2026-64513
A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for x86 architectures. When the apicupdateppr function does not find a deliverable interrupt, it fails to recompute the CR8 intercept, leading to a stale Task Priority Register Threshold TPRTHRESHOLD. This issue can cause a...
perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size
A flaw was found in the perl-Archive-Tar component. An attacker can exploit this vulnerability by providing a crafted tar header with an excessively large entry size field. This can lead to memory exhaustion, resulting in a Denial of Service DoS for the affected system...
PT-2026-66419
Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 affected versions not specified Description The MQTT Service contains a Server-Side Request Forgery SSRF flaw. An unauthenticated remote attacker can send a malicious ID to the MQTT Broker, which allows the...
MINI-MMGX-3X6W-28C5
Bulletin has no description...
MINI-WJ2R-39XR-85C4
Bulletin has no description...
MINI-PJCF-RGV5-W3MQ
Bulletin has no description...
CVE-2026-10684
In subsys/debug/coredump/coredumpshell.c, printcoredumphdr used the 16-bit tgtcode field of a stored Zephyr coredump header directly as an index into coredumptargetcode2str, a fixed 7-element array of string pointers, with no bounds check. A stored coredump whose tgtcode is = 7 causes an...
Exploit for Deserialization of Untrusted Data in Mediawiki
CVE-2026-58025 — MediaWiki PHP Deserialization RCE via Log Entry...
tar: Node-tar: Denial of Service via malformed tar archive header
A flaw was found in node-tar, a tar archive manipulation library for Node.js. A remote attacker could exploit this vulnerability by providing a specially crafted tar archive with a negative entry size in its header. This malformed header causes the archive scanner to enter an infinite loop,...
CVE-2026-10684
CVE-2026-10684 affects Zephyr's coredump print shell: in coredump_shell.c, print_coredump_hdr() uses the 16-bit tgt_code as an index into a fixed 7-element coredump_target_code2str[] without bounds checks, enabling an out-of-bounds read of a pointer to a string. A stored coredump with tgt_code &g...