153411 matches found
EUVD-2026-58686
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-66272
Dell Wyse Management Suite (WMS) affected: versions prior to 2605.0.2. CVE-2026-66272 describes a Missing Authentication for Critical Function vulnerability that allows an unauthenticated attacker with remote access to potentially disclose information (CVSS 3.1: 5.3, MEDIUM; AV:N/AC:L/PR:N/UI:N/S...
MINI-P9C8-MPJ5-57V8
Bulletin has no description...
CVE-2026-63701
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation...
CVE-2026-63701
Dell Wyse Management Suite versions prior to 2605.0.2 contain an Improper Deserialization of Untrusted Data flaw exploitable by a low-privileged local attacker to achieve privilege escalation. NVD rates it HIGH (CVSS 7.8). No active exploitation reported. Upgrade to 2605.0.2 via Dell DSA-2026-329.
CVE-2026-63702
Dell Wyse Management Suite (WMS) versions prior to 2605.0.2 are affected by CVE-2026-63702, a Use of Hard-coded Credentials vulnerability that allows a local, low-privilege attacker to gain unauthorized access. Root cause: hard-coded credentials. Impact is unauthorized access with high confidenti...
EUVD-2026-58681
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-63702
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
ROOT-APP-PYPI-CVE-2026-8643 CVE-2026-8643 in pip - Patched by Root
Root has patched CVE-2026-8643 in the pip package for Root:PyPI. Multiple fixed versions available...
EUVD-2026-58672
Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...
MINI-VXJJ-CMPH-77R9
Bulletin has no description...
CVE-2026-19768
Improper control of generation of code 'Code Injection' in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell code via a crafted setting value that is not properly escaped...
CVE-2026-19825
A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=saveservice. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotel...
CVE-2026-19825 SourceCodester Simple Client Management System Master.php save_service sql injection
A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=saveservice. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotel...
CVE-2026-19825
A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=saveservice. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotel...
EUVD-2026-58656
A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0. The impacted element is an unknown function of the file /classes/Master.php?f=saveservice. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotel...
CVE-2026-19825
SourceCodester Simple Client Management System 1.0 is affected by a SQL injection in /classes/Master.php?f=save_service when the ID argument is manipulated. The vulnerability enables remote exploitation and has publicly disclosed exploit information. The issue is consistently described across CVE...
EUVD-2026-58616
A vulnerability was determined in Tenda AC12 15.03.06.23multiTD01. This vulnerability affects the function formSetRebootTimer of the file /goform/SetSysAutoRebbotCfg of the component httpd web management interface. This manipulation of the argument rebootTime causes buffer overflow. The attack ma...
CVE-2026-19821
CVE-2026-19821 affects Tenda AC12 devices (15.03.06.23_multi_TD01) via httpd web management interface. The vulnerability targets function formSetRebootTimer in /goform/SetSysAutoRebbotCfg, where manipulating the rebootTime argument leads to a buffer overflow. The issue can be triggered remotely, ...
