77542 matches found
MGASA-2026-0446 Updated xdg-dbus-proxy packages fix security vulnerabilities
filtering for broadcast messages bypassing path/interface/member checks...
Updated xdg-dbus-proxy packages fix security vulnerabilities
filtering for broadcast messages bypassing path/interface/member checks...
EUVD-2026-85737
A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/uploadjson.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross site scripting. The attack may be initiated remotely. The explo...
CVE-2026-96739
A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/uploadjson.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross site scripting. The attack may be initiated remotely. The explo...
PT-2026-98157
Name of the Vulnerable Software and Affected Versions volotat Anagnorisis versions 0.3.1 and 0.4.0 Description A flaw exists in the Socket.IO Connect Interface component within the app.py file. Remote manipulation of an unknown function in this file allows an attacker to bypass authentication...
PT-2026-98136
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nl80211 wireless configuration interface where the system fails to properly validate the size of the High Efficiency HE operation element in beacons. Specifically,...
PT-2026-97789
This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...
CVE-2026-17511: Improper Removal of Sensitive Information Before Storage or Transfer
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81, and FW950.00 through FW950.H3 is affected by a vulnerability in the partition resource dump interface. An attacker with authenticated administrator-level access to the HMC or service...
PT-2026-105619
filtering for broadcast messages bypassing path/interface/member checks...
PT-2026-98216
Name of the Vulnerable Software and Affected Versions Honeywell PD45 Industrial Printer versions F10.19.010040 through F10.22.030744 Description An unauthenticated Remote Code Execution RCE issue exists in the HTTPS web management interface. This is caused by an arbitrary file upload flaw that...
PT-2026-97812
Name of the Vulnerable Software and Affected Versions IBM OPENBMC versions FW1120.00 through FW1120.01 IBM OPENBMC versions FW1110.00 through FW1110.31 IBM OPENBMC versions FW1060.00 through FW1060.81 Description A flaw exists in the BMC firmware management interface. A host system can trigger a...
CVE-2026-96898: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was detected in yhx070424 ShopXO up to 2.2.7. Affected by this vulnerability is an unknown functionality of the file config/ueditor.php of the component Ueditor Upload Interface. The manipulation of the argument pathtype results in path traversal. It is possible to launch the atta...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libkcapi (UTSA-2026-124529)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124529 advisory. A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle...
PT-2026-98283
Name of the Vulnerable Software and Affected Versions Botslab G980H affected versions not specified Description The firmware contains an authentication flaw in the root account accessible via the UART Universal Asynchronous Receiver-Transmitter, a hardware communication protocol interface. This...
PT-2026-97810
Name of the Vulnerable Software and Affected Versions IBM PowerVM Hypervisor versions 1120.00 through 1120.01 IBM PowerVM Hypervisor versions 1110.00 through 1110.31 IBM PowerVM Hypervisor versions 1060.00 through 1060.81 IBM PowerVM Hypervisor versions 950.00 through 950.H3 Description A flaw...
CVE-2026-88956: Missing Authentication for Critical Function
The Botslab G980H dash camera firmware contains an authentication vulnerability in the root account exposed through the device's UART interface. The affected account does not require a password before granting access to a privileged system interface, and the interface also displays the device's...
CVE-2026-97231: Missing Authentication for Critical Function
A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. Affected is an unknown function of the file app.py of the component Socket.IO Connect Interface. The manipulation results in missing authentication. It is possible to launch the attack remotely. The exploit has been made public a...
CVE-2026-19492: Use of Uninitialized Variable
IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in a hypervisor call interface. An attacker with root access to a guest partition can read a limited amount of hypervisor memory, potentially exposing...
CVE-2026-96515: Missing Authorization
This vulnerability exists in the Netlink ICT HG323RW router due to insufficient authorization and input validation controls in the diagnostic script import functionality. An authenticated attacker could exploit this vulnerability by uploading and executing a specially crafted script through the w...
CVE-2026-96739: Improper Neutralization of Input During Web Page Generation
A flaw has been found in SEMCMS up to 4.2. Affected by this issue is some unknown functionality of the file /Edit/php/uploadjson.php of the component KindEditor Upload Interface. This manipulation of the argument imgFile causes cross site scripting. The attack may be initiated remotely. The explo...