43527 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-60332
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Group Replication GCS. Supported versions that are affected are MySQ...
EUVD-2026-48749
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges...
EUVD-2026-48750
Weintek cMT3092X HMI allows a non-privileged user to modify cookies to gain elevated privileges...
Linux Distros Unpatched Vulnerability : CVE-2026-60160
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable...
Linux Distros Unpatched Vulnerability : CVE-2026-47043
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.12. Easily exploitable...
CVE-2026-61892
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges...
CVE-2026-16280
An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB. This can lead to incorrect GPU MMU mappings and may allow a non-privileged user to trigger access to unintended physical memory, resulting in...
CVE-2026-60134
Vulnerability: CVE-2026-60134 affects the Weintek cMT3092X HMI due to reliance on cookies without proper validation and integrity checks in a security decision. What’s affected: Weintek cMT3092X HMI. The description states that a non-privileged user can modify cookies to achieve elevated privileg...
CVE-2026-61892 Weintek cMT3092X Incorrect Permission Assignment for Critical Resource
Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges...
GHSA-4R2P-27MH-5M22 Open WebUI: Stored web worker XSS via Pyodide
Title: Same-origin Pyodide code execution allows server-side RCE via a shared chat Summary Open WebUI runs client-side Python Pyodide in a same-origin web worker. Through Pyodide's JavaScript API pyodide.http.pyfetch, or the js module which exposes the page's fetch / XMLHttpRequest executed Pytho...
DEBIAN-CVE-2026-64233
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts-lock across XU walks in uvcfunctionbind uvcfunctionbind walks &opts-extensionunits twice without holding opts-lock: - directly, for the iExtension string-descriptor fixup loop; - indirectly, four times...
CVE-2026-64233
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts-lock across XU walks in uvcfunctionbind uvcfunctionbind walks &opts-;extensionunits twice without holding opts-lock: - directly, for the iExtension string-descriptor fixup loop; - indirectly, four...
EUVD-2026-48642
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts-lock across XU walks in uvcfunctionbind uvcfunctionbind walks &opts-extensionunits twice without holding opts-lock: - directly, for the iExtension string-descriptor fixup loop; - indirectly, four times...
CVE-2026-10610
Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user...
CVE-2026-10610 Local privilege escalation in ESET security applications for macOS
Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user...
CVE-2026-10610
CVE-2026-10610 affects ESET security applications for macOS. It is a Local Privilege Escalation that could allow a low-privileged user to execute arbitrary code with elevated privileges. Exploitation would be LOCAL with LOW complexity and no user interaction required; the impact targets confident...
EUVD-2026-48558
Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user...
CVE-2026-10610
Local privilege escalation potentially allowed an attacker to execute arbitrary code as a privileged user...