871 matches found
CVE-2017-18799
Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6200v2 before 1.0.3.14, R6250 before 1.0.4.8, R6300v2 before 1.0.4.8, R6700 before 1.1.1.20, R7000 before 1.0.7.10, R7000P/R6900P before 1.0.0.56, R7100LG before 1.0.0.30, R7900 before 1.0.1.14,...
CVE-2026-20969
Improper input validation in SecSettings prior to SMR Jan-2026 Release 1 allows local attacker to access file with system privilege. User interaction is required for triggering this vulnerability...
CVE-2026-20969
Samsung’s SVE entry for CVE-2026-20969 maps to an improper input validation flaw in SecSettings present before the SMR Jan-2026 Release 1. The vulnerability allows a local attacker to access a file with system privileges, and exploitation requires user interaction. The Samsung-led patch for SMR J...
Google Android 安全漏洞
Google Android is a free and open source mobile operating system based on the Linux kernel developed by Google. Google Android suffers from a privilege obfuscation vulnerability that originates from a privilege obfuscation issue in the SettingsSliceProvider.java file, which can be exploited by an...
GHSA-9H52-P55H-VW2F Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default
Description The Model Context Protocol MCP Python SDK does not enable DNS rebinding protection by default for HTTP-based servers. When an HTTP-based MCP server is run on localhost without authentication using FastMCP with streamable HTTP or SSE transport, and has not configured...
EUVD-2025-198046
Eclipse Jersey has a Race Condition...
CVE-2025-12383
In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security settings. This issue may result in SSLHandshakeException under normal circumstances, but under certain...
CVE-2025-12383
CVE-2025-12383 is a race-condition vulnerability in Eclipse Jersey that can cause ignoring of critical SSL configurations (e.g., mutual authentication, custom key/trust stores), potentially enabling unauthorized trust in insecure servers. Affected assets in the provided IBM context include IBM St...
CVE-2025-10732
The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.12.1. This is due to improper access control implementation on the '/wp-json/sureforms/v1/srfm-global-settings' REST API endpoint...
CVE-2025-10732 SureForms – Drag and Drop Form Builder for WordPress <= 1.12.1 - Missing Authorization to Authenticated (Contributor+) Information Disclosure
The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to Sensitive Information Disclosure in all versions up to, and including, 1.12.1. This is due to improper access control implementation on the '/wp-json/sureforms/v1/srfm-global-settings' REST API endpoint...
EUVD-2025-33682
Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...
EUVD-2017-9831
Malware in sbrugna...
EUVD-2020-23456
Malware in sbrugna...
EUVD-2019-11268
Malware in sbrugna...
EUVD-2017-9847
Malware in sbrugna...
EUVD-2018-13687
Malware in sbrugna...
EUVD-2017-9894
Malware in sbrugna...
EUVD-2021-24982
Malware in sbrugna...