53899 matches found
EUVD-2026-70870
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts...
EUVD-2026-70786
MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fixed 1024-byte buffers using sprintf without length validation. Attackers can supply arbitrarily long MOOS identifiers that overflow the...
PT-2026-85385
SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed password to remotely access user hosts...
CVE-2026-85452
MOOS ui-moos through 50b9c6c contains a buffer overflow vulnerability in ScopeTabPane.cpp and ScopeGrid.cpp where client and variable names are formatted into fixed 1024-byte buffers using sprintf without length validation. Attackers can supply arbitrarily long MOOS identifiers that overflow the...
GHSA-3MP7-4RH5-JRV9 SiYuan: Localhost-trust admin bypass on auth-code-gated endpoints, with potential remote reachability via the fixed-port proxy
CVE: This vulnerability corresponds to CVE-2026-72809. Summary The kernel's CheckAuth grants RoleAdministrator to any request whose RemoteAddr is loopback 127.0.0.1, for a specific set of endpoints, and these localhost bypasses sit outside the accessAuthCode gate so they apply even when an access...
SiYuan: Localhost-trust admin bypass on auth-code-gated endpoints, with potential remote reachability via the fixed-port proxy
CVE: This vulnerability corresponds to CVE-2026-72809. Summary The kernel's CheckAuth grants RoleAdministrator to any request whose RemoteAddr is loopback 127.0.0.1, for a specific set of endpoints, and these localhost bypasses sit outside the accessAuthCode gate so they apply even when an access...
CVE-2026-80734
In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes BUG When running generic/795 with 8K block size, 4K page size, the test always fails, triggering some ASSERTs related to folio size: 795 241074: dropcaches: 3 assertion...
ROOT-OS-DEBIAN-13-CVE-2026-36849 CVE-2026-36849 in tiff - Patched by Root
Root has patched CVE-2026-36849 in the tiff package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-61144 CVE-2025-61144 in tiff - Patched by Root
Root has patched CVE-2025-61144 in the tiff package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2025-61143 CVE-2025-61143 in tiff - Patched by Root
Root has patched CVE-2025-61143 in the tiff package for Root:Debian:13. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-25896 CVE-2026-25896 in fast-xml-parser - Patched by Root
Root has patched CVE-2026-25896 in the fast-xml-parser package for Root:npm. Multiple fixed versions available...
EUVD-2026-58544
OpenChoreo: Authenticated OS command injection via OpenChoreo Workflow Plane templates enables code execution in privileged pods...
EUVD-2026-58507
OpenChoreo: Cross-project command execution and wirelog view access via OpenChoreo openchoreo-api exec and wirelogs endpoints...
EUVD-2026-63649
Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Ipados
CVE-2026-65330 — tmpfs setxattr PAC Bypass Component: XNU...
ROOT-APP-NPM-CVE-2022-21680 CVE-2022-21680 in marked - Patched by Root
Root has patched CVE-2022-21680 in the marked package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2022-37603 CVE-2022-37603 in loader-utils - Patched by Root
Root has patched CVE-2022-37603 in the loader-utils package for Root:npm. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-36849 CVE-2026-36849 in tiff - Patched by Root
Root has patched CVE-2026-36849 in the tiff package for Root:Debian:11. Multiple fixed versions available...