82 matches found
CVE-2026-97801
A flaw was found in .NET Framework. An unauthenticated remote attacker could exploit improper input validation by sending specially crafted input over the network. Successful exploitation allows an attacker to tamper with application data and make unauthorized modifications to the system state...
CVE-2026-101157 Security Advisory 0192
A stored cross-site scripting XSS vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated...
CVE-2026-101157
A stored cross-site scripting (XSS) vulnerability exists that may allow an unauthenticated attacker with adjacent-network access to inject malicious content. This content executes when an authenticated user views the affected content, potentially allowing the attacker to compromise the victim's a...
CVE-2026-101157 Security Advisory 0192
A stored cross-site scripting XSS vulnerability may allow an unauthenticated attacker with adjacent-network access to inject malicious content that executes when an authenticated user views affected content. Successful exploitation may allow the attacker to compromise the victim's authenticated...
PT-2026-107139
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A stored cross-site scripting XSS issue allows an unauthenticated attacker with adjacent-network access to inject malicious content. This content executes when ...
CVE-2026-76702
A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gateways could allow an authenticated local attacker to cause a denial-of-service. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...
CVE-2026-76702 Authenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gateways could allow an authenticated local attacker to cause a denial-of-service. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...
CVE-2026-76702 Authenticated Local Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways
A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gateways could allow an authenticated local attacker to cause a denial-of-service. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...
EUVD-2026-79228
A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gateways could allow an authenticated local attacker to cause a denial-of-service. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...
CVE-2026-76702
HPE Networking EdgeConnect SD-WAN Gateways contain a denial-of-service vulnerability in the operating system. An authenticated local attacker with low privileges can disrupt system operations, potentially leaving the device in an unstable state. The attack requires local access and has high compl...
PT-2026-92462
Name of the Vulnerable Software and Affected Versions HPE Networking EdgeConnect SD-WAN Gateways affected versions not specified Description A flaw in the operating system allows an authenticated local attacker to trigger a denial-of-service. This could disrupt system operations and lead to an...
ipmi:si: Return state to normal if message allocation fails
...
Deciso OPNsense Cross-Site Request Forgery Vulnerability
Deciso OPNsense is a set of open-source firewall and routing software based on FreeBSD developed by the Dutch company Deciso. Versions of Decivo OPNsense prior to 26.1.4 contained a cross-site request forgery vulnerability. This vulnerability stemmed from multiple OPNsense MVC API endpoints, whic...
Linux kernel BPF verifier Heap Buffer Overflow DoS
The vulnerability of the canjump function in the kernel/bpf/verifier.c module, which is part of the BPF interpreter support in Linux’s operating system, is related to errors in determining the system’s state. Exploiting this vulnerability could allow an attacker to trigger a service failure...
EUVD-2012-0972
Malware in sbrugna...
EUVD-2025-14029
Malicious code in bioql PyPI...
CVE-2025-37128: Execution with Unnecessary Privileges
A vulnerability in the web API of HPE Aruba Networking EdgeConnect SD-WAN Gateways could allow an authenticated remote attacker to terminate arbitrary running processes. Successful exploitation could allow an attacker to disrupt system operations, potentially resulting in an unstable system state...
PT-2025-32672 · Ami · Ami Aptiov
Name of the Vulnerable Software and Affected Versions: AMI APTIOV affected versions not specified Description: AMI APTIOV BIOS contains a flaw that allows a local user to cause an “Improper Initialization” condition. Successful exploitation may result in an unexpected system state, potentially...
CVE-2025-0505
On Arista CloudVision systems virtual or physical on-premise deployments, Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary, which can be used to query or manipulate system state for devices under management. Note that...
CVE-2025-0505: Improper Privilege Management
On Arista CloudVision systems virtual or physical on-premise deployments, Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary, which can be used to query or manipulate system state for devices under management. Note that...