EUVD-2026-51256

sqlite 3.41 is vulnerable to use after free in the json.c jsonCacheInsert function of the JSON cache management module...

CVE-2025-69931

CVE-2025-69931 affects CodeAstro Membership Management System 1.0. A SQL Injection vulnerability is exposed in the endpoint /delete_membership.php?id=1, enabling an attacker to potentially manipulate the database. The CVSS v3.1 base score is 9.8 (CRITICAL), with impact on confidentiality, integri...

PT-2026-66586

Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description SQL Injection occurs in the 'edit type.php' endpoint through the id parameter. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for...

CVE-2026-51291

...

PT-2026-66459

Name of the Vulnerable Software and Affected Versions koku-metrics-operator affected versions not specified Description A flaw in the CostManagementMetricsConfig custom resource allows a user with edit permissions to specify an arbitrary upload URL. When the authentication.type is set to token th...

PT-2026-66111

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in the Credential Management component allows a remote attacker to perform UI spoofing by using a crafted HTML page. Recommendations Update Google Chrome...

PT-2026-66589

Name of the Vulnerable Software and Affected Versions SourceCodester Tailor Management System version 1.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution. This occurs at the 'customeredit.php' endpoint...

PT-2026-66083

Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-66454

Name of the Vulnerable Software and Affected Versions Eaton Tripp Lite Series PADM firmware affected versions not specified Description Improper input validation in a session management interface allows an authenticated administrator to execute arbitrary commands within a restricted environment...

RHEL 8 : fence-agents (RHSA-2026:48604)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:48604 advisory. The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable...

EUVD-2025-210552

CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in the edittype.php endpoint via the Parameter id...

Siemens Teamcenter Visualization 2412.x < 2412.0012 / 2506.x < 2506.0009 / 2512.x < 2512.2605 Privilege Escalation (SSA-288252)

The version of Siemens Teamcenter Visualization installed on the remote host is 2412.x prior to 2412.0012, 2506.x prior to 2506.0009, or 2512.x prior to 2512.2605. It is, therefore, affected by a vulnerability: - Untrusted search path in IAM Client SDK may allow an authenticated user to potential...

The vulnerability of the automatic update mechanism for PAK ViPNet Coordinator HW 4, ViPNet Coordinator IG 4, and ViPNet xFirewall 5 lies in the excessive capabilities for decompressing updates. This allows a malicious entity with pre-compromised network management centers (NMCs) to create specially modified update packages, distribute them to managed PAKs, and thereby compromise the integrity of their operating environments.

Vulnerability of the automatic update mechanism for PAK ViPNet Coordinator HW 4, ViPNet Coordinator IG 4, and ViPNet xFirewall 5, due to excessive capabilities for decompressing updates. Exploiting this vulnerability allows a malicious actor, operating from a pre-compromised network management...

Apache Traffic Server resource management error vulnerability (CNVD-2026-30703)

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. There is a resource management vulnerability in Apache Traffic Server, which stems from failing to properly release memory when processing HostDB SRV records. Attackers can...

EUVD-2025-210562

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...

Apache Traffic Server resource management error vulnerability (CNVD-2026-30694)

Apache Traffic Server is a high-performance HTTP proxy server open source from the Apache Foundation in the United States. There is a resource management vulnerability in Apache Traffic Server, which stems from improper handling of object lifecycle in the intercept plugin. Currently, no detailed...

CVE-2025-69941

SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in addmeasurement.php?id=1...

Linux Distros Unpatched Vulnerability : CVE-2026-17764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in FedCM in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

CVE-2025-69930

CodeAstro Membership Management System 1.0 is affected by a SQL Injection vulnerability in print_membership_card.php?id=1. The associated CVE (CVE-2025-69930) has a CVSS v3.1 base score of 9.8 (CRITICAL) with network access, low attack complexity, no privileges required, and no user interaction, ...

CVE-2025-69947

CVE-2025-69947 affects SourceCodester Tailor Management System 1.0, with a vulnerability in the PHP component customeredit.php?id=1 that allows SQL Injection. The CVSS 3.1 score is 9.8 (CRITICAL) with network attack vector, no authentication, and high impacts to confidentiality, integrity, and av...