231721 matches found
PT-2026-55580
Name of the Vulnerable Software and Affected Versions RT-Thread versions prior to 5.0.3 Description A stack-based buffer overflow occurs in the SWM341 CAN Handler component within the CAN Receive function located in the bsp/synwit/libraries/SWM341 CSL/CMSIS/DeviceSupport/SWM341.h library. This...
PT-2026-55581
Name of the Vulnerable Software and Affected Versions RT-Thread versions prior to 5.0.3 Description A memory corruption issue exists in the sys getaddrinfo function within the components/lwp/lwp syscall.c file. A local attacker can trigger this by manipulating the ai addr argument. Recommendation...
The vulnerability of the FSG-file processing mechanism in the ClamAV antivirus program allows a hacker to induce a service failure.
The vulnerability of the FSG-file processing mechanism in the ClamAV antivirus program lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause service interruptions by sending a specially...
PT-2026-55660
Name of the Vulnerable Software and Affected Versions NousResearch hermes-agent versions prior to 2026.4.31 Description An issue exists in the Streaming Reasoning Tag Filter component within the GatewayStreamConsumer. filter and accumulate function located in the gateway/stream consumer.py file...
EUVD-2026-33432
golang.org/x/image/tiff has excessive resource consumption in PackBits decompression...
Mailman Cross-site scripting (XSS) vulnerability
Cross-site scripting XSS vulnerability in options.py for Mailman 2.1 allows remote attackers to inject script or HTML into web pages via the 1 email or 2 language parameters...
CVE-2026-57621
Unauthenticated PHP Object Injection in Booktics = 1.0.21 versions...
vuln-research-mcp
Vulnerability Research MCP Server A vulnerability research MC...
ROS-20260702-73-0072
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-20214
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the FSG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded...
The vulnerability of the software interface of the Git-based software platform for collaborative code development on GitLab EE allows a perpetrator to gain unauthorized access to read and modify protected information.
The vulnerability of the software interface of a Git-based software platform for collaborative code development on GitLab EE is related to the bypassing of authentication using a key controlled by the user. Exploiting this vulnerability can allow an intruder, operating remotely, to gain...
Linux Distros Unpatched Vulnerability : CVE-2026-14415
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who convinced a user to engage in specific UI gestures to...
Linux Distros Unpatched Vulnerability : CVE-2026-14395
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
The vulnerability of the session_regenerate_id() function in the Cacti network monitoring tool allows a malicious actor to perform unauthorized actions under the identity of another user.
The vulnerability of the sessionregenerateid function in the Cacti network monitoring tool is related to improper session management. Exploiting this vulnerability could allow an attacker to perform unauthorized actions on behalf of another user remotely...
Linux Distros Unpatched Vulnerability : CVE-2026-13490
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in glpi-project glpi 11.0.5/11.0.6/11.0.7. This affects the function Document::canViewFile of the file...
VulnCheck KEV: CVE-2026-1125
A weakness has been identified in D-Link DIR-823X 250416. Affected by this issue is the function sub412E7C of the file /goform/setwifidogsettings. Executing a manipulation of the argument wdenable can lead to command injection. The attack can be executed remotely. The exploit has been made...
The vulnerability of the library for working with the Protocol Buffers protocol (Protobuf) protobufjs lies in the uncontrolled modification of object prototype attributes, allowing attackers to increase their privileges.
The vulnerability of the library for working with the Protocol Buffers protocol Protobuf protobufjs is related to uncontrolled changes to object prototype attributes. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Linux Distros Unpatched Vulnerability : CVE-2025-15666
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function...
DEBIAN-CVE-2026-14423
Type Confusion in Tint in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...