107830 matches found
CVE-2026-17271
IBM i is affected by multiple vulnerabilities in the Debug Server, including CVE-2026-17271 which could allow a remote attacker to cause a denial of service due to improper validation of input size. Affected are IBM i releases 7.6, 7.5, 7.4, and 7.3 (5780-SS1 family), with the CVE described in IB...
EUVD-2026-57380
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-16931
CVE-2026-16931 affects IBM i releases 7.6, 7.5, 7.4 and 7.3. A remote attacker could cause a denial of service through improper handling of zero-length TCP options. The vulnerability has a CVSS v3.1 base score of 7.5 (NETWORK, HIGH impact on availability; no impact on confidentiality/integrity). ...
CVE-2026-17266 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...
CVE-2026-18246
CVE-2026-18246 affects IBM i 7.3–7.6, classified as CWE-436 (Interpretation Conflict) in the multipart parser of Navigator for i, allowing authenticated remote attackers to bypass security restrictions (CVSS 3.0 LOW). IBM has released PTFs SJ10887 (7.6), SJ10888 (7.5), SJ10890 (7.4), and SJ10891 ...
EUVD-2026-57349
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...
CVE-2026-73228
A flaw was found in Django REST framework. A remote attacker could exploit a vulnerability in the request.data parsing mechanism, which bypasses Django's DATAUPLOADMAXMEMORYSIZE protection. This allows an attacker to send oversized JSON and URL-encoded request bodies, leading to excessive...
CVE-2026-19173
A flaw was found in Skia, a 2D graphics library utilized within Chromium-based browsers. A remote attacker, having already compromised the browser's renderer process, could exploit an out-of-bounds write vulnerability. This exploitation occurs by enticing a user to visit a specially crafted HTML...
Denial-of-service (DoS)
Apache HttpComponents Core is vulnerable to a denial-of-service DoS vulnerability. The vulnerability is due to the decoder processing oversized compressed HTTP/2 header blocks without applying the configured header list size limit until the SETTINGS acknowledgement, which allows a remote attacker...
Security Bulletin:Vulnerability in httpcore affects IBM Netezza Appliance
Summary The httpcore package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVEsCVE-2026-54399 Vulnerability Details CVEID:CVE-2026-54399 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core...
EUVD-2025-210706
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted...
mariadb: MariaDB Server: Arbitrary code execution via wsrep_notify_cmd
A flaw was found in MariaDB server. When the wsrepnotifycmd feature is enabled, a remote attacker could exploit this vulnerability by embedding shell commands in the name of a joiner node. This could lead to arbitrary code execution on the server, allowing the attacker to take full control of the...
CVE-2026-9318
A flaw was found in tablib. This vulnerability, a stored cross-site scripting XSS issue, allows a remote attacker to execute arbitrary JavaScript code. By embedding malicious payloads within dataset titles, which are not properly sanitized during HTML export, an attacker can trigger the execution...
EUVD-2026-56987
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
ROS-20260812-73-0024
The vulnerability of the DBS Etherwatch file-sharing server and the Wireshark traffic analyzer involves the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...
PT-2026-71037
An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application. Successful exploitation prevents communication until the PLCnext service is manually restarted...
Linux Distros Unpatched Vulnerability : CVE-2026-72712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted...
Linux Distros Unpatched Vulnerability : CVE-2026-20338
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This...
DEBIAN-CVE-2026-19556
Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
