223057 matches found
CVE-2026-4018
TOCTOU Race Condition in specific trace commands of the TraceEvent system call could allow an attacker with local access and with the PROCMGRAIDTRACE ability, to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel...
CVE-2026-4017
Buffer Overflow in the entry handler of the TraceEvent system call could allow an attacker with local access to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel...
CVE-2026-49177
Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally...
CVE-2026-48580
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-47642
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2026-47290
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2026-15757
A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has n...
CVE-2026-0515
Insufficient Parameter Validation in the SchedGet system call could allow an attacker with local access to cause a crash of the QNX Neutrino kernel...
tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy
A flaw was found in Apache Tomcat. The AJP secret was comparable in non-constant time, allowing an attacker on the local network to mount a timing attack to determine the AJP secret, which may lead to unauthorized access or other security bypasses...
CVE-2026-62659 Authenticated users can make unauthorized changes on NETGEAR WAX333 Access Points
A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local network to make unauthorized changes to the device's settings...
CVE-2026-15757 Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem router
A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has n...
CVE-2026-15757 Insufficient input validation vulnerability in NETGEAR DGND3700v1 modem router
A security flaw was discovered in the NETGEAR DGND3700v1 that could allow someone on the same local WiFi network to send unauthorized commands to the device. This issue was identified through testing in a controlled research environment using a simulated version of the router's software and has n...
CVE-2026-15757
Summary (CVE-2026-15757): NETGEAR DGND3700v1 modem router reportedly suffers an insufficent input validation vulnerability that could let an attacker on the same local Wi‑Fi network send unauthorized commands to the device. The description/records indicate the issue was discovered via controlled ...
CVE-2026-62643
A flaw was found in Roundcube Webmail. Insufficient sanitization of Cascading Style Sheets CSS within HTML email messages allows a remote attacker to perform Server-Side Request Forgery SSRF or disclose sensitive information. This vulnerability occurs when stylesheet links point to local network...
CVE-2026-4018 TOCTOU race condition in the QNX Neutrino kernel impacts versions of the QNX Software Development Platform and QNX OS for Safety
TOCTOU Race Condition in specific trace commands of the TraceEvent system call could allow an attacker with local access and with the PROCMGRAIDTRACE ability, to cause information disclosure, data tampering or a crash of the QNX Neutrino kernel...
CVE-2026-4017
The CVE-2026-4017 entry concerns a buffer overflow in the TraceEvent() system call entry handler for the QNX Neutrino kernel (affecting QNX Software Development Platform and QNX OS for Safety). The underlying issue, a buffer overflow in the entry handler, could enable a local attacker to cause in...
CVE-2026-58640
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...
CVE-2026-58618
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...