225640 matches found
PT-2026-77134
A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN 0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched...
PT-2026-76885
A flaw has been found in Webkul Bagisto up to 2.4.4. The affected element is an unknown function of the file /customer/register of the component Customer-Registration Notification Email. This manipulation of the argument first name/last name causes basic cross site scripting. It is possible to...
PT-2026-77295
A flaw has been found in TRENDnet TV-IP751WIC 11.03.03. This vulnerability affects the function SystemNetworkChanged/SystemDDNSChanged/SystemEmailChanged/SystemFTPChanged/websCheckRealm/FUN 00432574/FUN 0043372C of the component alphapd. Executing a manipulation can lead to stack-based buffer...
PT-2026-77735
Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion component: Deployment. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
PT-2026-78211
Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 1.4.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...
PT-2026-78206
Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...
PT-2026-78199
Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...
PT-2026-77966
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.25.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...
PT-2026-78221
Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 4.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...
CVE-2021-43718
The EPSON EH-TW5350 projector (firmware 150075647YWWV110) has a Web Control authentication bypass discovered by B-BEAM-BOB during KITRI BoB 2021. A remote attacker can bypass authentication and cause a Denial of Service via crafted HTTP requests. No patch or remediation is documented; the CVE rec...
PT-2026-78148
Vulnerability in the Helidon product of Oracle Fusion Middleware component: Imperative Web Server. The supported version that is affected is 3.2.18. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this...
PT-2026-76887
A vulnerability was found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /viewdepartment.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be...
PT-2026-78251
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. Impacted is the function strcpy of the file /cgi-bin/wan.cgi of the component NVRAM. This manipulation of the argument wan l2tp password causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...
Linux Distros Unpatched Vulnerability : CVE-2026-19999
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function...
Linux Distros Unpatched Vulnerability : CVE-2026-75003
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url in a FuncIRI attribute of an SVG image could evade the remote image blocking, which m...
htop-3.5.3-1.1 on GA media (moderate)
htop-3.5.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11531-1 Rating: moderate Cross-References: CVE-2024-37676 CVSS scores: CVE-2024-37676 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be...
CVE-2026-75081 Webkul Bagisto store behavioral workflow
A vulnerability was detected in Webkul Bagisto up to 2.4.4. Impacted is an unknown function of the file /customer/account/rma/store. The manipulation of the argument rmaqty/resolutiontype/rmareasonid results in enforcement of behavioral workflow. The attack may be performed from remote. The explo...
CVE-2026-75081
A vulnerability was detected in Webkul Bagisto up to 2.4.4. Impacted is an unknown function of the file /customer/account/rma/store. The manipulation of the argument rmaqty/resolutiontype/rmareasonid results in enforcement of behavioral workflow. The attack may be performed from remote. The explo...
CVE-2026-75081
Webkul Bagisto up to 2.4.4 is vulnerable at /customer/account/rma/store; manipulating rma_qty, resolution_type, and rma_reason_id allows remote enforcement of RMA behavioral workflow. CVSS 3.1 scores 4.3 (MEDIUM). Vendor confirms some issues already fixed; remaining slated for upcoming releases. ...
