6881 matches found
EUVD-2026-56461
Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser
A flaw was found in jackson-core. A remote attacker can exploit an incomplete fix in the non-blocking JSON parser by streaming specially crafted JSON data in small chunks. This bypasses the intended number length constraint, causing the parser to accumulate excessive memory per connection. This...
CVE-2026-19546
CVE-2026-19546 : In DBI, this entry describes a flaw that is a partial fix for CVE-2026-14380, affecting Red Hat Enterprise Linux releases 9.8.z and 10.2.z. The vulnerability enables arbitrary code execution via a caller-influenced profile attribute. The connected documents provide the same descr...
CVE-2026-19546 Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute
A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546...
CVE-2026-19546 Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute
A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546...
CVE-2026-73161
creationtimestamp| type| source ---|---|--- 2026-08-11 10:44:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/56vuf5nggohcn...
smb: client: validate DFS referral PathConsumed
...
MINI-JJ7V-Q5WR-PF7J
Bulletin has no description...
SUSE CVE-2026-58427
Private org member list leaked via /members API endpoint - incomplete fix for PR 38145...
PT-2026-70727
Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description Incomplete cleanup in the software allows an unauthorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment,...
2026.3 IPU, Intel® UEFI Firmware Advisory
Summary: A potential security vulnerability for some Intel® UEFI Reference BIOS may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20712 Description: Incomplete cleanup in some UEFI firmware for so...
Security Update for Microsoft PowerPoint Products (August 2026)
The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by an information disclosure vulnerability. Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. Note that Nessus has not tested for this...
ECHO-0EA6-1C68-A084
Bulletin has no description...
CVE-2025-13293
creationtimestamp| type| source ---|---|--- 2026-08-10 20:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqwsk5rud2y...
CVE-2026-72886 Dokploy: Non-admin member gains root on the host by bypassing the owner/admin check on server-level schedules (incomplete fix of CVE-2026-45632)
Dokploy is a free, self-hostable Platform as a Service PaaS. From 0.29.2 until 0.29.13, schedule.create and schedule.update in apps/dokploy/server/api/routers/schedule.ts derive serviceId from applicationId or composeId and execute the owner/admin host-schedule gate only in the alternative branch...
CVE-2026-72886 Dokploy: Non-admin member gains root on the host by bypassing the owner/admin check on server-level schedules (incomplete fix of CVE-2026-45632)
Dokploy is a free, self-hostable Platform as a Service PaaS. From 0.29.2 until 0.29.13, schedule.create and schedule.update in apps/dokploy/server/api/routers/schedule.ts derive serviceId from applicationId or composeId and execute the owner/admin host-schedule gate only in the alternative branch...
CVE-2026-72863
creationtimestamp| type| source ---|---|--- 2026-08-10 19:28:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqthb3xrx2q...
CVE-2026-72862
creationtimestamp| type| source ---|---|--- 2026-08-10 18:58:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dqouw2k46mjyp 2026-08-10 19:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqtdnjmxl27...
CVE-2026-72740
creationtimestamp| type| source ---|---|--- 2026-08-10 18:38:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/aemh5cwnsrtqh 2026-08-10 19:24:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqta4hrup2b...