EUVD-2025-210915

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the podman load command, they can create files on the host machine with the privileges of the user running Podman...

EUVD-2026-80038

Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNSsetcgi.c and related ddnsProc.c components, enabling os command argument injection. Attackers can exploit the unsanitized parameters to inject additional command arguments...

CVE-2019-12949

CVE-2019-12949 De la vulnerabilidad de Cross Site Scripting a la ejecución remota de código en pfSense 2.4.4-p2 y 2.4.4-p3 Descripción de la información: En pfSense 2.4.4-p2 y 2.4.4-p3, si es posible engañar al administrador autenticado para que haga clic en un botón de una página de phishing, un...

cve-2019-14514

CVEID : CVE-2019-14514 Name of the affected products and versions : Microvirt MEmu todas las versiones anteriores a 7.0.2 Problem type : CWE-78: Neutralización Incorrecta de Elementos Especiales utilizados en un Comando del Sistema Operativo 'Inyección de Comandos del Sistema Operativo' Resumen...

cve-2019-14220

Resumen Un método no protegido en un servicio bstutils de BlueStacks 4.120 y anteriores en Mac y 4.110 y anteriores en Winodws permite a un atacante local leer el contenido de archivos arbitrarios con privilegios de sistema. Descripción BlueStacks es un emulador de Android disponible para sistema...

CVE-2026-76866

Netcore NR255-V firmware version 1.5.130703 builds root-run command lines from unquoted user-supplied DDNS input in DDNSsetcgi.c and related ddnsProc.c components, enabling os command argument injection. Attackers can exploit the unsanitized parameters to inject additional command arguments...

CVE-2026-76866

Netcore NR255-V router firmware version 1.5.130703 is affected by an OS command argument injection vulnerability in its DDNS functionality. The DDNSset_cgi.c and related ddns_Proc.c components construct root-run command lines from unquoted user-supplied DDNS input, allowing an authenticated attac...

CVE-2026-66890

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...

CVE-2026-19774

A flaw was found in BlueZ. This vulnerability, a stack-based buffer overflow in the Advanced Audio Distribution Profile A2DP stack, allows a network-adjacent attacker to execute arbitrary code. By pairing a malicious Bluetooth device with the target system, an attacker can exploit improper...

CVE-2026-83323

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: Platform Security. The supported version that is affected is 26.01.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle...

CVE-2026-76694

A privilege escalation vulnerability exists in the command line interface of HPE Networking EdgeConnect SD-WAN Gateways. Successful exploitation could allow an authenticated remote attacker with high privileges to escalate privileges beyond their authorized level, and execute arbitrary code on a...

CVE-2026-76689

A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administrative privileges could exploit this vulnerability by providing specially crafted configuration data. Successful...

CVE-2026-76684

Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD-WAN Orchestrator that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain administrative privileges leading ...

EUVD-2026-79936

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

EUVD-2026-79934

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

CVE-2026-87268

Oracle VM VirtualBox (component: Core ), version 7.2.16 , is affected by a local vulnerability that allows a low-privileged attacker with logon access to fully compromise the host (Confidentiality, Integrity, and Availability impacts all rated High ). The attack vector is local with low complexit...

CVE-2026-83411

Oracle Coherence (component: Core ) in Oracle Fusion Middleware is vulnerable to a high-severity issue (CVSS 3.1: 8.8 ) affecting versions 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . A low-privileged attacker with network access via HTTP can exploit this with low complexity to achieve full takeove...

EUVD-2026-79474

Vulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft component: Inventory. The supported version that is affected is 9.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise FIN...

CVE-2026-76697 Authenticated Information Disclosure in HPE Networking EdgeConnect Enterprise Web-Based Management Interface

A vulnerability in the web-based management interface of HPE Networking EdgeConnect SD-WAN Gateways could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially...

CVE-2026-76690

CVE-2026-76690 affects a component of HPE Networking EdgeConnect SD-WAN Gateways , allowing an authenticated remote attacker to achieve remote code execution as root by supplying a specially crafted input. The CVSS 3.1 score is 7.2 (HIGH) , with low attack complexity, no user interaction, and hig...