91032 matches found
CVE-2026-20315: Improper Access Control
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
CVE-2026-16883: Out-of-bounds Read
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...
CVE-2026-16855: Out-of-bounds Write
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to cause a denial of service due to a heap buffer overflow...
CVE-2026-16829: NULL Pointer Dereference
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a NULL pointer dereference...
CVE-2026-16885: Stack-based Buffer Overflow
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...
CVE-2026-16840: Out-of-bounds Write
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write...
CVE-2026-20357: Missing Authentication for Critical Function
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...
CVE-2026-73390: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Total Donations = 2.0.5 versions...
CVE-2026-73386: Insertion of Sensitive Information Into Sent Data
Unauthenticated Sensitive Data Exposure in Track Geolocation Of Users Using Contact Form 7 = 3.0.2 versions...
CVE-2026-73363: Missing Authorization
Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce 2.0.8 versions...
CVE-2026-73183: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Maps Marker Pro = 4.32 versions...
CVE-2026-49415: Time-of-check Time-of-use (TOCTOU) Race Condition
During execve2 of a SUID binary, the new virtual address space is installed before the process credentials are updated. During this window, a process running as the same user can access the target process's memory via procfs or linprocfs, because the kernel's debugging permission check still saw...
CVE-2026-16019: Improper Neutralization of Special Elements used in an SQL Command
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Faydam Innovation Inc. FAYDAM Datalogger allows SQL Injection. This issue affects FAYDAM Datalogger: from 2.7.1 before 2.8.0...
CVE-2026-73387: Improper Control of Filename for Include/Require Statement in PHP Program
Unauthenticated Local File Inclusion in Resido = 1.5 versions...
CVE-2026-73347: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in TrueBooker = 1.2.6 versions...
CVE-2026-54794: Server-Side Request Forgery (SSRF)
Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery SSRF vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...
CVE-2026-20318: Improper Input Validation
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
CVE-2026-75476: Improper Handling of Highly Compressed Data (Data Amplification)
Tanium addressed a compression bomb vulnerability in Threat Response...
Wapiti Web Application Vulnerability Scanner 3.3.2
Wapiti is a web application vulnerability scanner. It will scan the web pages of a deployed web application and will fuzz the URL parameters and forms to find common web vulnerabilities. This is the source code release...