264170 matches found
CVE-2026-12217
A security vulnerability has been detected in DVDFab Virtual Drive 2.0.0.5. Impacted is an unknown function in the library dvdfabio.sys of the component Signed Kernel Driver. The manipulation leads to improper privilege management. An attack has to be approached locally. The exploit has been...
CVE-2026-12198
creationtimestamp| type| source ---|---|--- 2026-06-15 04:07:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mocfvmpkk627...
CVE-2026-11774
creationtimestamp| type| source ---|---|--- 2026-06-15 03:00:36+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mocc5w2sez26...
Important: Red Hat Security Advisory: gimp security update
An update for gimp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...
gimp: GIMP: Remote Code Execution via PSP file parsing
A flaw was found in GIMP. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted PSP PaintShop Pro file. This flaw is caused by a heap-based buffer overflow, where the application does not properly validate the length of user-supplied data. Successful...
CVE-2026-12197
creationtimestamp| type| source ---|---|--- 2026-06-15 01:23:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moc4pxr3u32b 2026-06-15 01:30:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3moc54pa4u62l 2026-06-15 01:30:27+00:00| seen|...
CVE-2026-12192
creationtimestamp| type| source ---|---|--- 2026-06-15 01:00:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3moc3gsau3s22 2026-06-15 01:18:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moc4gzc3iz2b 2026-06-15 03:00:28+00:00| seen|...
CVE-2026-12197
A security flaw has been discovered in Ruijie EG105G-P 2.340. The impacted element is the function nslookup of the file /cgi-bin/luci/api/diagnose of the component JSON-RPC Diagnose Endpoint. Performing a manipulation of the argument params.target results in command injection. It is possible to...
CVE-2026-12188
creationtimestamp| type| source ---|---|--- 2026-06-15 00:13:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mobyspc63j2o...
Google Chrome Views component resource management error vulnerability (CNVD-2026-25115)
Google Chrome is a web browser developed by Google. Its main features include providing a fast, secure, and stable browsing experience. Google Chrome has a resource management vulnerability. This vulnerability stems from the Views component failing to properly handle the object lifecycle when...
CVE-2026-38060
Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionunlocksim via the pin parameter...
CVE-2026-50885
Incorrect access control in the share-based read endpoints of Sismics Docs Teedy v1.11 allow unauthorized attackers to access sensitive endpoints via a crafted request...
The vulnerability of the Windows Push Notifications service allows a perpetrator to escalate their privileges.
The vulnerability of Windows push-notifications services is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...
ROS-20260615-73-0008
The vulnerability of the StreamEnsureCapacity function in the RDP client FreeRDP is caused by a numerical overflow condition. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
RHEL 9 : webkit2gtk3 (RHSA-2026:25927)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:25927 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: webkitgtk: Processing maliciously...
The vulnerability of the Windows kernel component of the Windows operating system allows attackers to increase their privileges.
The vulnerability of the Windows Kernel component of the Windows operating system relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
VulnCheck KEV: CVE-2026-53435
In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in Jenkins core or plugins from an attacker-controlled config.xml submission in a way that allows them to handle HTTP requests afterwards. This can be used to...
ROS-20260615-73-0015
The vulnerability of the gdiSurfaceCommandClearCodec function in the RDP client FreeRDP is caused by a buffer overflow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
PT-2026-49291
Name of the Vulnerable Software and Affected Versions Tenda 5G03 version V05.03.02.04 Version 1.0 Description Command injection is possible in the action unlock sim function through the pin parameter. Recommendations At the moment, there is no information about a newer version that contains a fix...
