CVE-2026-48125

A flaw was found in UAParser.js, a JavaScript library for detecting client information. A remote attacker can exploit this vulnerability by sending a specially crafted Sec-CH-UA-Model header when the application uses the Client Hints API. This can cause excessive CPU usage due to a regular...

CVE-2026-15804 MetaGuru｜HCM - SQL Injection

The HCM developed by MetaGuru has a SQL Injection vulnerability. Authenticated remote attackers can inject SQL commands via specific parameters, thereby compromising the confidentiality, integrity, and availability of database data...

CVE-2026-39244

A flaw was found in adm-zip. A remote attacker can exploit this vulnerability by providing a specially crafted ZIP file. The file's header can be manipulated to declare an extremely large uncompressed size, causing the application to allocate an excessive amount of memory. This excessive memory...

EUVD-2026-44590

An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middleMITM user to make the router download and execute arbitrary command via a spoofed server. Refer to the ' Security Update for ASUS Router Firmware '...

CVE-2026-8919

CVE-2026-8919 affects ASUS GameSDK. A permissive cross-domain policy with untrusted domains could let a remote user induce a local UNC request to the application’s local service endpoint, exposing a local NTLM hash and enabling information disclosure, data tampering, or service disruption. The is...

PT-2026-60185

Name of the Vulnerable Software and Affected Versions F5 BIG-IP affected versions not specified Description When an HTTP/2 profile is configured on a virtual server, specific undisclosed requests can lead to increased memory resource utilization. This data plane issue allows a remote,...

CVE-2026-26719

CVE-2026-26719 affects xxl-job-admin v3.0.0 with a stored/reflected XSS in JobInfoController.java via unsanitized addressList (stored/URL-encoded JavaScript). Affected versions are

The vulnerability of the software for interacting with servers via cURL, related to errors in the certificate validation process, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software for interacting with servers via cURL is related to errors in the certificate validation process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the libcurl library in software applications for interacting with servers via cURL allows a hacker to gain unauthorized access to protected information.

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to the use of files and directories accessible from external parties. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

The vulnerability of DHCP servers for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of DHCP servers for Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the control consoles for SonicWall SMA 1000 microprogrammed network interface devices allows attackers to execute arbitrary code.

The vulnerability of the control consoles for SonicWall’s SMA 1000 microprogrammed network interface devices is related to improper code generation. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

The vulnerability of the mod_http2 module in the Apache HTTP Server allows a attacker to cause a service failure.

The vulnerability of the modhttp2 module in the Apache HTTP Server relates to the possibility of using memory after it is released. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the libcurl library in software applications for interacting with servers via cURL allows a hacker to gain unauthorized access to protected information.

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to the possibility of bypassing the authentication process. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected informatio...

The vulnerability of the tls_do_encryption function in the net/tls/tls_sw.c component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the tlsdoencryption function in the net/tls/tlssw.c component of the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Apache HTTP Server’s web server, related to the violation of the buffer limit, allows attackers to trigger a service failure.

The vulnerability of the Apache HTTP Server is related to a violation of the buffer limit. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions...

The vulnerability of the libcurl library in software tools for interacting with servers via cURL allows a hacker to perform an SSRF attack.

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to insufficient validation of requests at the server side. Exploiting this vulnerability allows a remote attacker to execute a SSRF attack...

The vulnerability of the `io.netty.handler.codec.http3.QpackDecoder` component in the Netty framework, which is used for developing network applications, servers, and clients. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the io.netty.handler.codec.http3.QpackDecoder component in the Netty framework, which is used for developing network applications, servers, and clients, involves an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service...

perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names

A flaw was found in XML::LibXML for Perl. A remote attacker could exploit this vulnerability when processing specially crafted XML node names containing incomplete UTF-8 character sequences. This can lead to an out-of-bounds read in heap memory, potentially causing the application to crash and...

JLSEC-2026-671

wolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped...

JLSEC-2026-718 Heap buffer overflow in DTLS 1.3 ACK message processing

Heap buffer overflow in DTLS 1.3 ACK message processing. A remote attacker can send a crafted DTLS 1.3 ACK message that triggers a heap buffer overflow...