23767 matches found
CVE-2026-78328: Missing Authorization
A missing authorization vulnerability in the SonicWall Network Security Manager NSM On-Prem Management interface allows a lower-privileged Admin user to escalate privileges to SuperAdmin...
PT-2026-85629
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the nvmet-tcp module where a remote initiator can trigger a kernel warning. By sending a command with a Scatter Gather List SGL claiming an excessively large number, t...
Linux Distros Unpatched Vulnerability : CVE-2026-80788
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: Do not WARN on remotely-controlled oversized SGL allocations When fuzzing the nvme target code, I tripped a kernel warning in nvmettcpmapdata because...
PT-2026-85735
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the FUSE Filesystem in Userspace module. The abort on kill path within the request wait answer function calls fuse abort conn and returns without waiting...
CVE-2026-85222
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addoncenter.cgi of the component Add-On Center. Such manipulation of the argument fname/furl/fflag/floginuser leads to os command injection. It is possible to...
CVE-2026-85222
D-Link DNS-340L (firmware 1.01B04) is affected by an OS command injection in the Add-On Center component, specifically in /cgi-bin/addon_center.cgi. Manipulation of the f_name, f_url, f_flag, and f_login_user arguments allows remote code execution. The attack requires high privileges (authenticat...
EUVD-2026-70748
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addoncenter.cgi of the component Add-On Center. Such manipulation of the argument fname/furl/fflag/floginuser leads to os command injection. It is possible to...
CVE-2026-85222 D-Link DNS-340L Add-On Center addon_center.cgi os command injection
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addoncenter.cgi of the component Add-On Center. Such manipulation of the argument fname/furl/fflag/floginuser leads to os command injection. It is possible to...
CVE-2026-85222 D-Link DNS-340L Add-On Center addon_center.cgi os command injection
A vulnerability has been found in D-Link DNS-340L 1.01B04. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/addoncenter.cgi of the component Add-On Center. Such manipulation of the argument fname/furl/fflag/floginuser leads to os command injection. It is possible to...
CVE-2026-79772 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.4-rails, ruby3.3-rails, ruby3.2-rails...
CVE-2026-79770 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, pact-broker-docker-fips, ruby3.4-rails, ruby3.3-rails, ruby3.2-rails, gitlab-rails-ce-fips, gitlab-rails-ce, ruby4.0-rails, pact-broker-docker...
CVE-2026-79772 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.3-rails, ruby3.2-rails, ruby3.4-rails...
GHSA-XQQH-3W52-Q8P7 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.3-rails, ruby3.2-rails, ruby3.4-rails...
CVE-2026-79770 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.2-rails, kube-logging-operator, ruby3.3-rails, ruby3.4-rails...
CVE-2026-79771 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.2-rails, kube-logging-operator, ruby3.3-rails, ruby3.4-rails...
GHSA-RH9X-7XJC-VWX2 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.2-rails, kube-logging-operator, ruby3.3-rails, ruby3.4-rails...
GHSA-5JHF-FPP7-V2PV vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.2-rails, kube-logging-operator, ruby3.3-rails, ruby3.4-rails...
DEBIAN-CVE-2026-85044
Use of released resource in Mobile in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-85047
Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
