116887 matches found
CVE-2026-58438
A flaw was found in Gitea. This vulnerability, identified as an Insecure Direct Object Reference IDOR, exists within the issue-dependency removal function. A remote attacker with write access to issues in one repository can exploit this flaw to remove a dependency link to an issue in a private...
CVE-2026-64832
A flaw was found in FFmpeg, specifically within the NVIDIA NVDEC hardware decoder. A remote attacker could exploit this double-free vulnerability by providing a specially crafted video file. This can lead to memory corruption, potentially allowing for arbitrary code execution or causing a denial ...
USN-8651-1 curl vulnerability
It was discovered that curl incorrectly handled reusing connections when the origin changed between transfers. A remote attacker could possibly use this issue to obtain sensitive information...
CVE-2026-16686
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...
CVE-2026-16814 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a heap buffer overflow...
EUVD-2026-62520
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption...
EUVD-2026-62428
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to gain unauthorized access to AIX systems due to improper validation of TLS certificates...
CVE-2026-15061 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 's nimesis registration service could allow a remote attacker to overwrite files due to path traversal...
CVE-2026-54793
Dell OpenManage Enterprise versions prior to 4.7.0 contain a Cross-site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation. A low-privileged remote attacker could exploit this with user interaction to achieve information exposure . The CVSS v3.1 sc...
CVE-2026-51539
A flaw was found in libmodbus. This Denial of Service DoS vulnerability exists in the receive loop when the software is running on Windows. The issue is caused by improper timeout management during network read operations, which can allow a remote attacker to cause the application to become...
CVE-2026-76045
A flaw was found in WebGL in Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a high-severity security risk...
CVE-2026-76041
An information leak flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=540027341 Mitigation Avoid visiting untrusted websites or opening untrusted HTML content. Users should exercise caution when browsing the internet a...
PT-2026-78867
Name of the Vulnerable Software and Affected Versions TP-Link TL-MR100 version 3.2 TP-Link TL-MR150 version 3.2 TP-Link TL-MR6400 version 8.0 TP-Link Archer MR600 version 2 Description An unauthenticated denial-of-service issue exists due to improper handling of exceptional request conditions,...
PT-2026-78613
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to an integer overflow...
PT-2026-78670
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Remote attackers can execute arbitrary code due to improper validation of network-supplied pointers. Recommendations At the moment, there is no information about a newer...
PT-2026-78595
Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description A remote attacker could cause a denial of service due to uncontrolled resource consumption, which occurs when a system fails to limit the amount of resources such...
CVE-2026-71694
An issue in Berkeley Out-of-Order Machine BOOM / BoomTile RTL benchmark v1.2 2d08d0d8b4563212175212f9db0e69f6e68c9619 allows a remote attacker to execute arbitrary code via the CSR trap-return state restoration logic, MRET handling logic, mstatus.MPRV update path, CSRFile logic in ProcessorFuzz...
PT-2026-78601
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An integer underflow in the IPv4 IP-options parser allows a remote attacker to obtain sensitive information. An integer underflow occurs when an arithmetic operation results...
ROS-20260819-73-0029
The vulnerability in Vim relates to the failure to take measures to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...