91323 matches found
CVE-2026-19695: Stack-based Buffer Overflow
Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service...
CVE-2026-19293: Weak Password Requirements
SMP security request from peripheral does not include the maximum encryption key size supported. Using a key with less than the maximum keysize makes brute-forcing the key easier. See V6 in BLERP paper linked below...
CVE-2026-19292: Authentication Bypass by Primary Weakness
Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier. See V4 in the BLERP paper linked below...
CVE-2026-17004: Loop with Unreachable Exit Condition
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop...
CVE-2026-66689: Missing Authorization
Unauthenticated Broken Access Control in Anti Spam and list cleaner – AcyChecker = 2.0.0 versions...
CVE-2026-61979: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in SAML SP Single Sign On = 5.4.3 versions...
CVE-2026-58439: Improper Access Control
Branch Protection Bypass via PR Retargeting Preserves Stale official Approval Flag...
CVE-2026-27380: Deserialization of Untrusted Data
Editor PHP Object Injection in Car Rental Manager = 1.3.9 versions...
CVE-2026-11840: Improper Neutralization of Special Elements used in an SQL Command
Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection...
CVE-2026-17069: Cross-Site Request Forgery (CSRF)
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of anti-CSRF tokens...
CVE-2026-27543: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in MStore API = 4.20.0 versions...
CVE-2026-56860: Inefficient Algorithmic Complexity
Previously, resolving relative paths containing parent directory '..' segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking f...
CVE-2026-56862: Allocation of Resources Without Limits or Throttling
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely...
CVE-2026-33818: Uncontrolled Resource Consumption
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...
CVE-2026-56859: Allocation of Resources Without Limits or Throttling
Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion...
CVE-2026-56858: Improper Neutralization of Input During Web Page Generation
Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS...
CVE-2026-28175: Improper Neutralization of Input During Web Page Generation
Unauthenticated Cross Site Scripting XSS in Visitors Traffic Real Time Statistics = 8.11 versions...
CVE-2026-28174: Insertion of Sensitive Information Into Sent Data
Customer Sensitive Data Exposure in WP Event SOlution = 4.1.18 versions...