42474 matches found
EUVD-2026-48432
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...
ManageEngine AD360 Detection Tool
A proof of concept detection tool for ManageEngine AD360 products affected by CVE-2026-11374. The Python utility safely checks whether an ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, or ADAudit Plus deployment is AD360-integrated and therefore meets the exploit precondition for th...
CVE-2026-38764
Protegent 360 v2.0.0.4 from Unistal Systems Pvt. Ltd. contains a local privilege escalation vulnerability in the kernel driver pgsecdl.sys (CVE-2026-38764). The issue enables a low-privilege local attacker to escalate to SYSTEM, with a CVSS v3.1 base score of 7.8 (High): Local, Low privileges req...
CVE-2026-38763
An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub13828...
CVE-2026-8458 affecting package cmake for versions less than 3.30.3-15
CVE-2026-8458 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...
GHSA-C97M-VXHJ-P7J6 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudformation-fips, crossplane-provider-azure-spring, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-appmesh, crossplane-provider-aws-account-fips, crossplane-provider-aws-elastictranscoder,...
CVE-2026-59889 vulnerabilities
Vulnerabilities for packages: gradle, thingsboard, infinispan, apache-nifi-registry, keycloak-config-cli, logstash, scala, ruby3.3-jrjackson, jenkins-plugin-manager, ruby3.2-jrjackson, apicurio-registry, confluent-kafka, wavefront-proxy, zookeeper, apache-nifi, apache-tika, spark, opensearch,...
GHSA-C97M-VXHJ-P7J6 vulnerabilities
Vulnerabilities for packages: glab, crossplane-provider-aws-route53, crossplane-provider-aws-eks, crossplane-provider-azure-managedidentity, crossplane-provider-azure-sql, osv-scanner, vale, crossplane-provider-aws-s3, crossplane-provider-aws-lambda, crossplane-provider-aws-sns,...
CVE-2026-56852 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-route53, terraform-provider-acme, kubo, kube-rbac-proxy, tofu-controller, docker-machine-driver-harvester, go-discover, external-dns, prometheus-operator, thanos, chisel, crossplane-provider-azure-managedidentity, pulumi-language-yaml, zarf,...
CVE-2026-64834 FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer
FFmpeg versions 0.6.3 through 8.1.2 contain an infinite loop vulnerability in the RTP/ASF demuxer within libavformat/rtpdecasf.c that allows remote attackers to cause denial of service by sending a crafted RTP/ASF stream. The rtpasffixheader function fails to validate a minimum chunksize when...
Malicious code in veldora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a848da2622d0adc27e55e1a650c39892aea7ef22c81c4c6ed4e5b6dc64809de Package [email protected] was scanned across 6 files. No evidence of install-time or import-time execution of remote content, no credential or environmen...
MAL-2026-11018 Malicious code in veldora (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a848da2622d0adc27e55e1a650c39892aea7ef22c81c4c6ed4e5b6dc64809de Package [email protected] was scanned across 6 files. No evidence of install-time or import-time execution of remote content, no credential or environmen...
SUSE CVE-2026-47013
unknown...
SUSE CVE-2026-47035
unknown...
SUSE CVE-2026-50524
unknown...
SUSE CVE-2026-61666
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when th...
SUSE CVE-2026-62574
unknown...
RefluXFS: A Linux Kernel Local Privilege Escalation to Root in XFS (CVE-2026-64600)
Executive summary Qualys Threat Research Unit TRU identified CVE-2026-64600, a race condition in the Linux kernel’s XFS filesystem copy-on-write path. An attacker with an ordinary local account can exploit this race condition to overwrite protected files on disk and gain host root privileges on...
