229591 matches found
PT-2026-72889
Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A remote SQL injection flaw exists in the /viewmedicine.php file. The issue occurs when the delid argument is manipulated, allowing an attacker to execute arbitrary SQL commands o...
PT-2026-73066
A vulnerability was determined in code-projects Online Shopping System 1.0. Affected is an unknown function of the file /action.php. This manipulation of the argument proId causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be...
Linux Distros Unpatched Vulnerability : CVE-2026-68476
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: reload ip header after head reallocation ipvsgetoutrt calls skbensurewritable which may reallocate skb-head. CVE-2026-68476 Note that Nessus relies on the...
Linux Distros Unpatched Vulnerability : CVE-2026-72373
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - afs: Fix missing NULL pointer check in afsbreaksomecallbacks Fix afsbreaksomecallbacks to check to see if afslookupvolumercu returned NULL e.g. the specified...
PT-2026-72280
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: reject user command submission without a command BO amdxdna drm submit execbuf passes the user-supplied command BO handle straight into amdxdna cmd submit with drv cmd == NULL. When the handle is AMDXDNA INVALID BO...
MINI-9M2R-Q29G-RGH7
Bulletin has no description...
MINI-39Q4-GM5H-2537
Bulletin has no description...
CVE-2026-63649
The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted options that bypass whitelist checks...
MINI-M652-9V3R-4W85
Bulletin has no description...
GHSA-4VR5-P2GC-H23P vulnerabilities
Vulnerabilities for packages: telegraf...
MINI-3MR5-2W5F-GGWX
Bulletin has no description...
EUVD-2026-58802
PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PAX Technology Q80. Authentication is not required to exploit this vulnerability...
MINI-9JF7-H8XF-VJJQ
Bulletin has no description...
CVE-2026-73679
ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled. The application decodes HTML-encoded content via...
CVE-2026-19847
A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. The manipulation of the argument pin results in stack-based buffer overflow. The attack can be launched remotely. The...
CVE-2026-19846
A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...
CVE-2026-19682
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account...
CVE-2026-72970 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
CVE-2026-19682 Command Injection
A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account...