CVE-2026-82826: Cleartext Transmission of Sensitive Information

Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attacker to eavesdrop on with authentication credentials and sensitive data in transit. This issue affects Hitachi Coding Software Suite: through 3.3.0...

CVE-2026-97277: Missing Authorization

Subscriber Broken Access Control in Social Boost = 3.6.2 versions...

CVE-2026-103490: Missing Authorization

In JetBrains YouTrack before 2026.2.19422 privilege escalation was possible via user group links...

CVE-2026-103492: Loop with Unreachable Exit Condition

In JetBrains YouTrack before 2026.2.19422 doS attack was possible via crafted PSD attachments...

CVE-2026-14316: Heap-based Buffer Overflow

The revoked-key error path builds a human-readable failure reason using sprintf into a heap buffer. The allocated buffer is too small for the final formatted message. When sprintf writes the full message, it can write past the end of the heap allocation...

Multiple vulnerabilities in Image Scanner Driver for Linux

Overview Image Scanner Driver for Linux provided by PFU Limited contains multiple vulnerabilities listed below: OS Command Injection CWE-78 - CVE-2026-78229 Link Following CWE-59 - CVE-2026-81310 Nir Yehoshua of Cipher Security Labs reported these vulnerabilities to PFU Limited and coordinated...

CVE-2026-81310

Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance...

CVE-2026-78229

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations...

CVE-2026-81310

The Image Scanner Driver for Linux is vulnerable to a link following vulnerability. An attacker with local access to a Linux system where the product is installed can use a special method in advance to overwrite arbitrary files . No specific exploit details or remediation steps are provided in th...

CVE-2026-81310

Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance...

CVE-2026-81310

Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance...

EUVD-2026-89568

Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwrite arbitrary files by using a special method in advance...

CVE-2026-78229

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations...

CVE-2026-78229

The Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker with the ability to log in to a Linux system where the affected product is installed may execute arbitrary OS commands by making specific preparations. Exploitation details are not provided in the docum...

CVE-2026-78229

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations...

EUVD-2026-89569

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations...

PT-2026-102996

Image Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations...

CVE-2026-97235: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in ThemeREX Addons 2.45.0 versions...

CVE-2026-97241: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in BackupEase = 2.2.2 versions...

CVE-2026-79625: Concurrent Execution using Shared Resource with Improper Synchronization

Affected products do not properly synchronize access to their monitoring functionality. When multiple clients send concurrent requests, this may lead to incorrect reads or writes, or to corruption of internal memory structures. An authenticated remote attacker with monitoring access can exploit...