85113 matches found
CVE-2026-2260: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in D-Link DCS-931L up to 1.13.0. This affects an unknown part of the file /goform/setSysAdmin. The manipulation of the argument AdminID results in os command injection. The attack can be executed remotely. The exploit has been made public and could be used. This...
CVE-2026-26009: Improper Neutralization of Special Elements used in an OS Command
Catalyst is a platform built for enterprise game server hosts, game communities, and billing panel integrations. Install scripts defined in server templates execute directly on the host operating system as root via bash -c, with no sandboxing or containerization. Any user with template.create or...
CVE-2021-26381: Allocation of Resources Without Limits or Throttling
Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a large number of pages, potentially resulting in kernel memory corruption...
CVE-2025-32003: Out-of-bounds Read
Out-of-bounds read in the firmware for some 100GbE IntelR Ethernet Network Adapter E810 before version cvl fw 1.7.6, cpk 1.3.7 within Ring 0: Bare Metal OS may allow a denial of service. Network adversary with an authenticated user combined with a low complexity attack may enable denial of servic...
CVE-2026-2155
A security flaw has been discovered in D-Link DIR-823X 250416. The affected element is the function sub4208A0 of the file /goform/setdmz of the component Configuration Handler. The manipulation of the argument dmzhost/dmzenable results in os command injection. The attack can be executed remotely...
CVE-2026-2175
A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub420618 of the file /goform/setupnp. This manipulation of the argument upnpenable causes os command injection. Remote exploitation of the attack is possible. The exploit has been made available to...
CVE-2026-2241
A vulnerability was found in janet-lang janet up to 1.40.1. This affects the function osstrftime of the file src/core/os.c. Performing a manipulation results in out-of-bounds read. The attack must be initiated from a local position. The exploit has been made public and could be used. The patch is...
CVE-2026-2241 janet-lang janet os.c os_strftime out-of-bounds
A vulnerability was found in janet-lang janet up to 1.40.1. This affects the function osstrftime of the file src/core/os.c. Performing a manipulation results in out-of-bounds read. The attack must be initiated from a local position. The exploit has been made public and could be used. The patch is...
CVE-2026-2142
A weakness has been identified in D-Link DIR-823X 250416. This vulnerability affects the function sub420688 of the file /goform/setqos. Executing a manipulation can lead to os command injection. The attack can be executed remotely. The exploit has been made available to the public and could be us...
CVE-2026-2151
A vulnerability has been found in D-Link DIR-615 4.10. This affects an unknown part of the file advfirewall.php of the component DMZ Host Feature. Such manipulation of the argument dmzipaddr leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the...
CVE-2026-2210
A vulnerability has been found in D-Link DIR-823X 250416. This affects the function sub4211C8 of the file /goform/setfiltering. Such manipulation leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...
CVE-2026-2210
CVE-2026-2210 affects D-Link DIR-823X (firmware 250416). The issue is in function sub_4211C8 of /goform/set_filtering, where input manipulation permits OS command injection. Exploitation can be remote over the network, and public disclosure of the exploit is noted. No patch/version details are pr...
PT-2026-7121
Name of the Vulnerable Software and Affected Versions janet-lang versions prior to 1.40.1 Description A flaw exists in the os strftime function within the src/core/os.c file of janet-lang. A manipulation of this function can lead to an out-of-bounds read. This issue requires local access to...
Photon OS 5.0: Libtiff PHSA-2026-5.0-0757
An update of the libtiff package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0757. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Expat PHSA-2026-5.0-0756
An update of the expat package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0756. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
The vulnerability of the HPE Alletra operating system, the HPE Nimble Storage All Flash Arrays, and the HPE Nimble Storage Hybrid Flash Arrays is related to access control errors, which allow attackers to escalate their privileges.
The vulnerabilities of the HPE Alletra operating system, the HPE Nimble Storage All Flash Arrays, and the HPE Nimble Storage Hybrid Flash Arrays are related to access control errors. Exploiting these vulnerabilities can allow attackers to increase their privileges remotely...
CVE-2026-2210: Improper Neutralization of Special Elements used in an OS Command
A vulnerability has been found in D-Link DIR-823X 250416. This affects the function sub4211C8 of the file /goform/setfiltering. Such manipulation leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...
Janet 缓冲区错误漏洞
Janet is a functional and imperative programming language and bytecode interpreter developed by Janet Language. Versions of Janet prior to 1.40.1 contained a buffer error vulnerability, which was caused by an out-of-bounds read in the osstrftime function, potentially leading to information leakag...
Photon OS 5.0: Nodejs PHSA-2026-5.0-0755
An update of the nodejs package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0755. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
