90769 matches found
CVE-2026-77703: Key Exchange without Entity Authentication
Key exchange without entity authentication vulnerability in HAVELSAN Inc. Liman Render Engine allows Adversary in the Middle AiTM. This issue affects Liman Render Engine: from 1.0 before 1.2-75...
CVE-2026-51997: Improper Input Validation
An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open functions...
CVE-2026-78308: Improper Authentication
Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022...
CVE-2026-14441: Comparison Using Wrong Factors
A logic flaw in Java cache key handling object comparison handling could lead to improper identifier resolution when processing specific user account structures. The issue has been remediated by updating the internal comparison routines to ensure accurate object evaluation and prevent potential...
CVE-2026-93289: Improper Neutralization of Special Elements used in an OS Command
The affected products are vulnerable to command injection attack that could allow an unauthenticated attacker to execute system commands during the pairing process...
CVE-2026-97511: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: avoid out-of-bounds access in monitor In NAN, we don't know on what band the frame will be sent. Therefore we set info-band to NUMNL80211BANDS. However, this leads to out-of-bound access in...
CVE-2026-96873: Improper Neutralization of Input During Web Page Generation
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Mediawiki - CirrusSearch extension allows Reflected XSS. This issue affects Mediawiki - CirrusSearch extension through 1.46.0...
CVE-2026-90481: Authentication Bypass Using an Alternate Path or Channel
In PortSwigger Burp Suite DAST formerly Burp Suite Enterprise Edition before 2026.8, an authentication bypass can occur via an alternate path or channel...
CVE-2026-88916: Incorrect Authorization
Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Privilege Escalation. This issue affects UlakPDF: through 09092026...
CVE-2026-19532: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: from 2.3.2 before 2.3.4-1124...
CVE-2026-92905: Uncaught Exception
ZohoCorp ManageEngine EventLog Analyzer and Log360 before build 13071 were vulnerable to a DoS vulnerability that allowed attackers to crash the log collector using malformed syslog packets...
CVE-2026-78313: Improper Access Control
Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...
CVE-2026-78311: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...
CVE-2026-78310: Authorization Bypass Through User-Controlled Key
Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...
CVE-2026-81645: Out-of-bounds Read
Out-of-bounds read vulnerability in the graphics module. Successful exploitation of this vulnerability may affect availability...
Linux Distros Unpatched Vulnerability : CVE-2026-75432
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent, and Scanner::PushIndentTo...
CVE-2026-97517: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: reject beacons with bad HE operation The HE operation element not only needs to be longer than the fixed part, but also have an appropriate size for the variable part inside of it. Check this...
CVE-2026-88369: Out-of-bounds Read
zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump...
CVE-2026-78309: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022...