112908 matches found
CVE-2026-13639: Insufficient Entropy
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks...
CVE-2026-11545: Missing Authorization
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...
ROS-20260918-73-0015
The vulnerability of the drivers/block/rnbd/rnbd-srv.c component in the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...
ROS-20260918-73-0069
The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260918-73-0104
The vulnerability of the f2fswriteendio function in the fs/f2fs/data.c module of the F2FS file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...
CVE-2026-84241: Improper Authorization
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization...
CVE-2026-61833: Improper Authorization
zot is a container image and artifact registry based on the Open Container Initiative Distribution Specification. Prior to 2.1.18, the bearer authentication handler in pkg/api/authn.go maps every HTTP method other than GET and HEAD to the push action, so DELETE requests are not checked for the...
CVE-2026-11537: Trusting HTTP Permission Methods on the Server Side
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...
The vulnerability of the ColdFusion software platform, related to the failure to eliminate instructions in dynamically executed code, allows attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform lies in the lack of measures taken to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the R7WebsSecurityHandler() function in the Tenda i6 Wi-Fi router software allows a hacker to bypass the catalog.
The vulnerability of function R7WebsSecurityHandler in the Tenda i6 Wi-Fi router software is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to bypass the directory structure...
The vulnerability of the action_set_systemSettings() function in the SettingHandler component of the GPON-terminal software Tenda G103 allows a intruder to execute arbitrary commands.
The vulnerability of the actionsetsystemSettings function in the SettingHandler component of the GPON-terminal software framework Tenda G103 is related to the lack of measures to sanitize input data during the processing of the lanIp parameter. Exploiting this vulnerability could allow a remote...
The vulnerability of Twig CMS’ security policy, October CMS, allows a hacker to gain unauthorized access to protected information.
The vulnerability of Twig CMS’ security system, October CMS, is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2025-1350: Generation of Error Message Containing Sensitive Information
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
ROS-20260918-73-0056
The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the Rsync file transfer and synchronization utility lies in the lack of measures to neutralize specific elements, allowing a perpetrator to execute arbitrary commands.
The vulnerability of the Rsync file transfer and synchronization utility is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
EulerOS Virtualization 2.12.0 : wget (EulerOS-SA-2026-3680)
According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within...
CVE-2026-93385
Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-93385
Information leak in Paint in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
