EUVD-2026-48289

Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse. This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise...

CVE-2026-11804

Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse. This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise...

CVE-2026-11804 Program Module Vulnerability

Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse. This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise...

Security Bulletin: AIX is vulnerable to denial of service due to zlib (CVE-2026-27171)

Summary A vulnerability in zlib could allow a remote attacker to cause a denial of service CVE-2026-27171. AIX uses zlib as part of its data compression functions. Vulnerability Details CVEID:CVE-2026-27171 DESCRIPTION: zlib before 1.3.2 allows CPU consumption via crc32combine64 and...

EUVD-2026-48242

SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol handler. When a siyuan://plugins/ link references a name that is not an installed plugin, the application opens a custom tab and inserts the link's icon parameter into the tab header via innerHTML without...

ROOT-OS-DEBIAN-13-CVE-2016-9580 CVE-2016-9580 in rootio-openjpeg2 - Patched by Root

Root has patched CVE-2016-9580 in the rootio-openjpeg2 package for Root:Debian:13. Multiple fixed versions available...

EUVD-2026-47933

Improper neutralization of special elements used in an OS command 'OS command injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-update allows OS Command Injection. This issue affects pardus-update: from 0.6.6 before 0.7.0...

sar2html <=3.2.2 Plot Parameter - Remote Code Execution

sar2html version 3.2.2 and prior contains an OS command injection vulnerability in the plot parameter of index.php. A remote, unauthenticated attacker can append shell metacharacters to the plot parameter and execute arbitrary operating system commands. id: CVE-2025-34030 info: name: sar2html...

Web-Check < 2.0.1 Screenshot API - OS Command Injection

Lissy93/web-check contains a command injection caused by unsanitized user input in the screenshot API, letting attackers execute arbitrary system commands, exploit requires sending crafted url parameters. id: CVE-2025-32778 info: name: Web-Check 2.0.1 Screenshot API - OS Command Injection author:...

Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal

The web server of Lawo AG vsm LTC Time Sync vTimeSync is affected by a "..." triple dot path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only...

ROOT-OS-DEBIAN-12-CVE-2025-37959 CVE-2025-37959 in rootio-linux - Patched by Root

Root has patched CVE-2025-37959 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-39702 CVE-2025-39702 in rootio-linux - Patched by Root

Root has patched CVE-2025-39702 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-68315 CVE-2025-68315 in rootio-linux - Patched by Root

Root has patched CVE-2025-68315 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-71149 CVE-2025-71149 in rootio-linux - Patched by Root

Root has patched CVE-2025-71149 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-68794 CVE-2025-68794 in rootio-linux - Patched by Root

Root has patched CVE-2025-68794 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-37799 CVE-2025-37799 in rootio-linux - Patched by Root

Root has patched CVE-2025-37799 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-46681 CVE-2024-46681 in rootio-linux - Patched by Root

Root has patched CVE-2024-46681 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-22115 CVE-2025-22115 in rootio-linux - Patched by Root

Root has patched CVE-2025-22115 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-43840 CVE-2024-43840 in rootio-linux - Patched by Root

Root has patched CVE-2024-43840 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-40106 CVE-2025-40106 in rootio-linux - Patched by Root

Root has patched CVE-2025-40106 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...