1494113 matches found
CVE-2026-96540
An improper access control vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to...
CVE-2026-100232
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute...
CVE-2026-100232
A post-authentication OS Command Injection vulnerability exists in the SonicWall Network Security Manager (NSM) on-prem (supporting VMWare, Hyper-V, Azure, and KVM). Due to improper neutralization of special elements used in an OS command, a remote authenticated attacker could execute arbitrary c...
CVE-2026-100232
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute...
EUVD-2026-101630
Post-authentication Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem which in specific conditions could potentially enable a remote authenticated attacker to execute...
CVE-2026-96540
An improper access control vulnerability (CWE-863) exists in the SonicWall Network Security Manager (NSM) on-prem within the export settings. A remote authenticated attacker could exploit this flaw to obtain sensitive information , potentially leading to privilege escalation to administrator stat...
EUVD-2026-101629
An improper access control vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to...
CVE-2026-96540
An improper access control vulnerability has been identified in the SonicWall Network Security Manager NSM on-prem in export settings, potentially allowing a remote authenticated attacker to obtain sensitive information. This may allow the attacker to escalate privileges to an administrator or to...
DEBIAN-CVE-2026-73261
Mongoose is an embedded web server and network library. Prior to 7.23, the built-in TCP/IP stack enabled by MGENABLETCPIP in src/netbuiltin.c does not reject a TCP option whose declared opts1 length exceeds the remaining option bytes. In handleopt, a NOP followed by a truncated MSS option causes...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: mariadb10.11: mariadb10.11-10.11.18-4.1.hum1 aarch64, s390x, x8664 mariadb10.11-backup-10.11.18-4.1.hum1 aarch64, s390x, x8664 mariadb10.11-client-utils-10.11.18-4.1.hum1 noarch...
CVE-2026-101997
An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection...
CLSA-2026-1791997763 TuxCare security update for org.springframework.integration (5 CVEs)
TuxCare rebuilt 36 org.springframework.integration packages to address 5 CVEs. Fixed in 5.3.2.RELEASE-tuxcare.1...
CLSA-2026-1791996087 TuxCare security update for org.springframework.batch (2 CVEs)
TuxCare rebuilt 5 org.springframework.batch packages to address 2 CVEs. Fixed in 4.0.1.RELEASE-tuxcare.1...
EUVD-2026-101469
An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection...
CVE-2026-101997 Junos OS: SRX Series: A network-based attacker causes Remote Code Execution when Security Intelligence is used without a tls-profile authentication
An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ipfd of Juniper Networks Junos OS on SRX Series allows an unauthenticated network-based attacker to execute code with root privileges via a configured Security Intelligence feed connection...
CVE-2026-101997
Juniper Networks Junos OS on SRX Series is vulnerable to an SQL Injection vulnerability within the ipfd component. An unauthenticated network-based attacker can exploit this flaw to achieve Remote Code Execution with root privileges when a Security Intelligence feed connection is configured witho...
CVE-2026-91157
Discourse is an open-source discussion platform. Prior to 2026.9.0, 2026.8.1, 2026.7.3, and 2026.1.9, sites with secure uploads enabled did not reconcile existing upload security metadata when a previously public category became read-restricted or when category permissions changed during a bulk...
CLSA-2026-1791988201 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.0.6-tuxcare.1...
CVE-2026-84471
The fix for CVE-2026-12996 was incomplete. A use-after-free in OpenVPN 2.6.0 through 2.6.22 and 2.7alpha1 through 2.7.7 allows remote authenticated peers to potentially cause a denial of service or leak memory via crafted packets during TLS session promotion or expiry...