13251 matches found
CVE-2026-26897
An issue in EcoOnline EHS com.airsweb.v10 application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component...
PT-2026-82599
Name of the Vulnerable Software and Affected Versions openssl encrypt versions prior to 1.4.9 Description A shell injection issue exists in the info command's reconstructed CLI block. The system interpolates untrusted metadata fields without proper quoting, allowing attackers to craft metadata...
PT-2026-82709
Potential for logging sensitive data in Spring Cloud Function Azure. Spring Cloud Function 5.0.0 - 5.0.3 Spring Cloud Function 4.3.0 - 4.3.4 Spring Cloud Function 4.2.0 - 4.2.7...
CVE-2026-81696: Improper Output Neutralization for Logs
opensslencrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users...
EUVD-2026-67100
An issue in EcoOnline EHS com.airsweb.v10 application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component...
CVE-2026-26897
An issue in EcoOnline EHS com.airsweb.v10 application for Android, version 0.2.499 allows a remote attacker to obtain sensitive information and execute arbitrary code via the AndroidManifest.xml component...
PT-2026-82597
openssl encrypt versions before 1.4.9 fail to sanitize terminal control characters in file metadata printed by the info command. Attackers can craft malicious files containing escape sequences to repaint terminal output and forge verification information displayed to users...
Security update for rmt-server (important)
openSUSE security update: security update for rmt-server ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21640-1 Rating: important References: bsc1261388 bsc1261398 bsc1261406 bsc1261417 bsc1261426 bsc1261436 bsc1261447 bsc1261458 bsc1261466...
CVE-2026-81698: Improper Neutralization of Special Elements used in an OS Command
opensslencrypt versions before 1.4.9 contain a shell injection vulnerability in the info command's reconstructed CLI block that interpolates untrusted metadata fields without quoting. Attackers can craft metadata values like peppername containing shell commands that execute when users copy the...
PT-2026-82712
Improper caching of the original content type in Spring Cloud Stream Avro. Spring Cloud Stream 5.0.0 - 5.0.2 Spring Cloud Stream 4.3.0 - 4.3.3 Spring Cloud Stream 4.2.0 - 4.2.6...
PT-2026-82656
Name of the Vulnerable Software and Affected Versions DNG SDK versions 1.7.1 2502 and earlier Description An out-of-bounds read issue exists where the software reads data outside the intended boundary of a buffer, potentially leading to memory exposure. This allows an attacker to disclose sensiti...
PT-2026-82699
Name of the Vulnerable Software and Affected Versions Spring for GraphQL versions 2.0.0 through 2.0.4 Spring for GraphQL versions 1.4.0 through 1.4.6 Spring for GraphQL versions 1.1.0 through 1.3.9 Spring for GraphQL versions 1.0.0 through 1.0.7 Description The GraphiQL page bundled with the...
PT-2026-82836
Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.14.0 through 4.14.6, a low-privilege API user can read the cleartext cluster key from a configuration endpoint that fails to redact it. The REST API provides a...
CVE-2026-26897
The EcoOnline EHS Android application (com.airsweb.v10) version 0.2.499 is vulnerable to a deep link validation bypass in its custom URL scheme handler. The application exports an activity that handles the ehs-app:// scheme without specifying a host or path. While the app uses an allow-list for s...
The vulnerability of the vcn_v3_0_dec_msg() function in the drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c driver for AMD GPU cores in the Direct Rendering Infrastructure (DRI) of the Linux operating system allows a hacker to access protected information or cause a service failure.
The vulnerability of the vcnv30decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv30.c driver for AMD GPU cores in Linux’s Direct Rendering Infrastructure DRI kernel is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability can allow an attacker to access...
TencentOS Server 3: 389-ds:1.4 (TSSA-2026:0909)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0909 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
CVE-2026-16850
creationtimestamp| type| source ---|---|--- 2026-08-26 23:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtzitauec62m...
CVE-2026-16996
creationtimestamp| type| source ---|---|--- 2026-08-26 21:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtzc4oc2yq2y...
