ROS-20260727-73-0027

A vulnerability in the Apache HTTP Server's OCSP protocol implementation is related to out-of-bounds memory access. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

CVE-2026-51300

...

CVE-2026-51078

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

CVE-2026-51078

An issue in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the str parameter of the filemanagecontrol.php component...

CVE-2026-51078

Technical details about CVE-2026-51078 are not publicly provided in the supplied documents. Monitor for updates from NVD/CVE and ENISA sources for affected versions, impact, and remediation.

PT-2026-65296

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Sequoia versions prior to 15.7.8 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 Description An out-of-bounds write issue exists due ...

ROS-20260727-73-0011

A vulnerability in apache-activemq related to uncontrolled resource consumption. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

CVE-2026-51296

DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

PT-2026-65023

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-65033

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-51077

Dede CMS v5.7.118 is affected by a SQL injection in the sys_sql_query.php component (parameter sqlquery). Remote attackers can obtain sensitive information with network access; no privileges required, no user interaction. Root cause: unsafely handling input in sqlquery parameter. Impact: confiden...

CVE-2026-51303

SQLite core parsing contains a use-after-free in sqlite3ExprListDelete (expr.c). Frees an ExprList and then accesses the freed object, enabling a remote attacker to crash the app, leak memory, or, in some scenarios, achieve arbitrary code execution. Affected component: core parsing; potentially S...

PT-2026-65313

Name of the Vulnerable Software and Affected Versions Milk admin versions prior to 0.9.9 Description Cross-site scripting XSS occurs in the Modules/Docs/DocsController.php file. This issue allows remote attackers to inject arbitrary HTML or web scripts through the action parameter in a specially...

ROS-20260727-73-0029

A vulnerability in the Apache HTTP Server is related to a buffer overflow at the start of the buffer. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

ROS-20260727-73-0025

A vulnerability in the Apache HTTP Server's modproxyftp module is related to an infinite loop with no exit condition. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

SUSE CVE-2026-55717

In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: redirect' /'response-ip-data: CNAME ' rule or the RPZ 'rpz-cname-override' equivalent, a remote client who controls any delegated domain can crash the daemon. The...

CVE-2026-61108

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: GIS. Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged...

Linux Distros Unpatched Vulnerability : CVE-2026-60182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Clone Plugin. Supported versions that are affected are MySQL Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-60316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are MySQL Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-60189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server:...