319397 matches found
CVE-2026-42721: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in SERVIT Software Solutions affiliate-toolkit affiliate-toolkit-starter allows Blind SQL Injection.This issue affects affiliate-toolkit: from n/a through 3.9.1...
PT-2026-107608
Name of the Vulnerable Software and Affected Versions Cisco networking software affected versions not specified Description An internal security review identified issues related to incorrect calculations, which fall under the Common Weakness Enumeration CWE Pillar CWE-682. Recommendations At the...
PT-2026-107616
Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description An issue exists in the VXLAN Operation, Administration, and Maintenance OAM feature, known as NGOAM, due to improper input validation of IP traffic. An unauthenticated remote...
CVE-2026-20032: Improper Isolation or Compartmentalization
A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, local attacker with low privileges to escape the Python sandbox and gain unauthorized access to the underlying operating system of an affected device. This vulnerability is due to insufficient validati...
PT-2026-107583
Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description Insufficient validation of user-supplied input in the Python interpreter allows an authenticated, local attacker with low privileges to escape the Python sandbox. By manipulating...
Cisco NX-OS Software Control Plane DoS (cisco-sa-nxos-nscpdos-SnderkC7)
According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability. - A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate...
The vulnerability of the UART interface in the microprogramming software of Mercusys AC12 V2 allows a hacker to execute arbitrary code.
The vulnerability of the UART interface in the microprogramming software of Mercusys AC12 routers lies in the absence of a mechanism to protect the alternative hardware interface. Exploiting this vulnerability allows an attacker to execute arbitrary code...
The vulnerability of AMD’s microprogramming software, related to zero-division errors, allows attackers to disclose protected information.
The vulnerability of AMD’s microprogramming software is related to zero-division errors. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2026-20173: Allocation of Resources Without Limits or Throttling
A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by...
CVE-2026-101155
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...
CVE-2026-101155 Security Advisory 0189
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...
CVE-2026-101155 Security Advisory 0189
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...
CVE-2026-101155
An authenticated remote attacker with specific permissions can perform a Path Traversal (CWE-22) attack on the Software Management Studio Software Repository . By using specially crafted requests or file uploads, the attacker can read or write files on the platform filesystem beyond the intended ...
EUVD-2026-93951
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...
CVE-2026-79817 Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager Client Software
A sensitive information disclosure vulnerability exists in the client software of HPE Networking ClearPass Policy Manager. Successful exploitation could allow an attacker with local access to the affected system to obtain sensitive information...
CVE-2026-79813 Local Privilege Escalation in ClearPass Client Software
A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow a low-privileged local user to execute commands with elevated privileges on the affected system, if certain conditions outside of the attacker's control are met...
CVE-2026-79813 Local Privilege Escalation in ClearPass Client Software
A local privilege escalation vulnerability exists in the ClearPass client software. Successful exploitation could allow a low-privileged local user to execute commands with elevated privileges on the affected system, if certain conditions outside of the attacker's control are met...
CVE-2026-79802
A command injection vulnerability exists in the client software of ClearPass Policy Manager . An attacker capable of supplying crafted input to the affected software can execute arbitrary commands with elevated privileges on the host. Specific details regarding the vulnerable component, root caus...
CVE-2026-79802 Command Injection Vulnerability in the ClearPass Policy Manager Client Software
A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host...
