16949 matches found
TOTOLINK CX-A3002RU - Remote Code Execution
An issue in TOTOLINK-CX-A3002RU V1.0.4-B20171106.1512 and TOTOLINK-CX-N150RT V2.1.6-B20171121.1002 and TOTOLINK-CX-N300RT V2.1.6-B20170724.1420 and TOTOLINK-CX-N300RT V2.1.8-B20171113.1408 and TOTOLINK-CX-N300RT V2.1.8-B20191010.1107 and TOTOLINK-CX-N302RE V2.0.2-B20170511.1523 allows a remote...
PRTG Network Monitor - Local File Inclusion
PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges including administrator. A remote unauthenticated user can craft an HTTP request and override attributes of the 'include' directive in /public/login.htm and perform a Local...
EUVD-2026-62394
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21...
NPM: MagicMirror: ssrf calendar .js
NPM: MagicMirror: ssrf calendar .js vulnerability discovered by ? in WordPress Npm magicmirror versions 2.37.0...
CVE-2026-27544
Unauthenticated Remote Code Execution RCE in QA Analytics = 5.2.0.0 versions...
Description of the security update for Outlook 2016: August 11, 2026 (KB5002755)
None None...
Description of the security update for SharePoint Server 2019: August 11, 2026 (KB5002894)
None None...
Astra Linux – Vulnerability in openexr
OpenEXR provides the specification and reference implementation of the EXR file format, a image storage format used in the motion picture industry. From version 3.4.0 to before version 3.4.8, a properly crafted B44 or B44A EXR file could cause an out-of-bounds write in any application that decode...
Astra Linux – Vulnerability in Firefox and Thunderbird
Incorrect boundary conditions in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9...
Astra Linux – Vulnerability in freerdp3
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a malicious RDP server could trigger a heap-buffer-overflow write in the FreeRDP client when processing Audio Input AUDIN format lists. The audinprocessformats function reuses the callback-formatscount...
CVE-2026-68481
A flaw was found in Apache CXF. This vulnerability affects the DefaultEncryptingOAuthDataProvider, where revoked access and refresh tokens can still be successfully decrypted and reported as active. This bypasses the intended token revocation process, potentially allowing unauthorized access to...
fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}
...
CVE-2026-18632
CVE-2026-18632 affects langgenius dify up to 1.14.2, specifically the Jinja2 Handler’s jinja2_transformer.py (api/core/helper/code_executor/jinja2/jinja2_transformer.py) and its use of jinja2.Template. The vulnerability arises from improper neutralization of special elements used in the template ...
SUSE CVE-2026-54562
Cloudreve is a self-hosted file management and sharing system. Prior to 4.16.1, Cloudreve's remote download workflow accepts user-supplied URLs at POST /api/v4/workflow/download and passes them to the configured downloader without blocking loopback, localhost, IPv6 localhost, or...
Siemens Teamcenter Visualization 2412.x < 2412.0012 / 2506.x < 2506.0009 / 2512.x < 2512.2605 Privilege Escalation (SSA-288252)
The version of Siemens Teamcenter Visualization installed on the remote host is 2412.x prior to 2412.0012, 2506.x prior to 2506.0009, or 2512.x prior to 2512.2605. It is, therefore, affected by a vulnerability: - Untrusted search path in IAM Client SDK may allow an authenticated user to potential...
PT-2026-65881
Name of the Vulnerable Software and Affected Versions consul-mcp-server versions 0.1.0 through 0.1.3 Description The software does not restrict how the Consul backend address is supplied, which allows a connected client to override the configured Consul address using a request header. A malicious...
Integer Overflow or Wraparound
Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...
CVE-2026-15968
Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Progress MOVEit Transfer. This issue affects MOVEit Transfer: before 2025.1.5, from 2026.0.0 before 2026.0.3...
EUVD-2026-46735
Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware component: Patchset Assistant. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Dat...
