77759 matches found
PT-2026-84514
Name of the Vulnerable Software and Affected Versions hermes-agent version 0.18.0 Description A flaw in the Session Chat Interface component, specifically within the gateway/platforms/api server.py file, allows a remote attacker to cause a denial of service. Recommendations At the moment, there i...
PT-2026-84498
A vulnerability in the web-based management interface of AOS-CX could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's...
CVE-2026-78592: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in Kibana can lead to the unauthorized deletion of privileged resources via Path Traversal CAPEC-126. A low-privileged user holding tag creation privileges could cause a subsequent administrative action in the tag...
PT-2026-84426
Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description Command injection flaws in the web-based management interface allow an authenticated remote attacker to execute arbitrary commands as a privileged user on the underlyin...
CVE-2026-84287: Improper Resource Shutdown or Release
A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/apiserver.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The...
PT-2026-84493
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A signature verification bypass exists in the command line interface. This issue allows an authenticated actor with administrative privileges to execute arbitrary code on the underlying...
CVE-2026-73782: Use of Externally-Controlled Format String
A format string vulnerability exists in the command line interface of AOS-CX that could lead to unauthenticated remote code execution. Successful exploitation of this vulnerability results in the ability to execute arbitrary code as a privileged user on the underlying operating system...
PT-2026-84211
A denial-of-service security issue exists within FactoryTalk® Historian Machine Edition. A network adjacent attacker who is authenticated could send crafted requests to the web interface, resulting in buffer overflow conditions that may cause the device to crash and become unresponsive...
PT-2026-84407
Name of the Vulnerable Software and Affected Versions HPE Networking Fabric Composer affected versions not specified Description A stored cross-site scripting XSS issue exists in the web-based management interface. This allows an unauthenticated adjacent attacker to execute arbitrary script code ...
CVE-2026-83548: Server-Side Request Forgery (SSRF)
A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized...
PT-2026-84475
Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description A flaw in the web-based management interface allows an authenticated remote attacker to perform a server-side request forgery SSRF attack. SSRF is a technique where an attacker induces a...
CVE-2026-73780: Cross-Site Request Forgery (CSRF)
A vulnerability in the web-based management interface of AOS-CX switches exposes some sessions to a lack of Cross-Site Request Forgery CSRF protection. This could allow a remote unauthenticated attacker to execute arbitrary input against the affected interface if the attacker can convince an...
VulnCheck KEV: CVE-2026-83548
SonicWall SMA1000 Appliances contains a server-side request forgery vulnerability that could allow a remote unauthenticated attacker to gain unauthorized access to sensitive functionality and perform unauthorized operations...
The vulnerability of the Remote Access API interface for Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Remote Access API interface for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2026-13337: SQL Injection: Hibernate
CWE-564: SQL Injection: Hibernate vulnerability exists that could allow the injection of a malicious HQL query in the NetBotz database when a malicious user is logged into the NetBotz via the web-service interface or webui...
CVE-2026-73767: Improper Neutralization of Special Elements used in an OS Command
Authenticated command injection vulnerabilities exist in the command line interface of AOS-CX. Successful exploitation of these vulnerabilities results in the ability to execute arbitrary commands as a privileged user on the underlying operating system...
CVE-2026-75458
The teacher-end interface POST /api/teacher/user/delete/id in XueZhiSi Open Source Exam System = 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserByIdid, setDeletedtrue, updateByIdFilter in sequence, without any validation of...
[SECURITY] Fedora 44 Update: hcloud-1.67.0-1.fc44
A command-line interface for Hetzner Cloud...
SUSE CVE-2026-72229
In the Linux kernel, the following vulnerability has been resolved: batman-adv: clean untagged VLAN on netdev registration failure When an mesh interface is registered, it creates an untagged struct batadvmeshifvlan on top of it via the NETDEVREGISTER notifier. But in this process, another receiv...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2026-4917, CVE-2026-4918, CVE-2026-4919)
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-4917 DESCRIPTION: IBM Guardium Data Protection 12.1 could allow an administrative user to traverse directories on the system. An attacker could send a specially crafted URL...