261722 matches found
CVE-2026-35425 Azure API Management (APIM) Remote Code Execution Vulnerability
...
Important: nvidia-persistenced
Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...
PT-2026-64242
The CAFEHAUS API WordPress plugin through 1.0.0 does not have any authentication or authorisation when updating user passwords, allowing unauthenticated attackers to set the password of any user, including administrators, and fully take over their accounts...
The vulnerability of the django.middleware.cache.UpdateCacheMiddleware() function in the Django web application framework allows attackers to disclose sensitive information that should be protected.
The vulnerability of the django.middleware.cache.UpdateCacheMiddleware middleware in the Django web application framework is related to improper handling of registrations. Exploiting this vulnerability could allow an attacker to disclose sensitive information that is protected by this middleware...
Important: kmod-nvidia-latest-dkms
Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...
PT-2026-64439
Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.5 through 0.9.9 Description An authenticated user can overwrite the content of messages in channels they do not belong to, including private and direct message channels. This occurs when a chat completion request is sen...
PT-2026-64435
Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.17.0 Description An OAuth scope authorization bypass exists in the admin storage policy routes. A user with an OAuth bearer token scoped only to Admin.Read can access the 'POST /api/v4/admin/policy/oauth/signin'...
ROS-20260724-73-0016
The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions...
Important: nvidia-open
Issue Overview: NVIDIA Display Driver for Windows and Linux contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, data tampering, and code...
PT-2026-64446
Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.17.0 Description Cloudreve fails to properly validate WOPI access tokens and enforce requested viewer actions. The system generates tokens in the format ., but the middleware.ViewerSessionValidation function only...
CVE-2026-54120 Microsoft Surface Remote Code Execution Vulnerability
...
CVE-2026-54120
Technical details for CVE-2026-54120 are not publicly available in the provided documents. The materials only reiterate the description of improper input validation in Microsoft Surface. Monitor for updates from vendors for affected products and patches.
CVE-2026-56165 Microsoft Account Remote Code Execution Vulnerability
...
CVE-2026-16379
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Content Processes component...
CVE-2026-49035
creationtimestamp| type| source ---|---|--- 2026-07-23 22:00:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrdtlrt3us2w 2026-07-23 22:24:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrduveaath23...
CVE-2026-47724
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.4, the /api/v1/ route surface trusts the bearer token alone for authorisation on most endpoints. The codebase itself admits this at internal/api/hosts.go:384: "API trusts the bearer toke...
CVE-2026-15687
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false...
CVE-2026-15687
A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new files in arbitrary locations on the client machine executing copy operations via non-tar copyDirectoryFromPod when enableTarCompressing is false...