43609 matches found
PX4 Autopilot
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker with access to the MAVLink interface to execute arbitrary shell commands without cryptographic authentication. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of...
GHSA-87MJ-5GGW-8QC3 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-4926 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards, langfuse, kibana, vitess, tileserver-gl, opensearch-dashboards-fips, redisinsight, saf, code-server, thingsboard, langfuse-fips, tileserver-gl-fips, gemini-cli...
GHSA-6Q6W-FF4V-HGR5 vulnerabilities
Vulnerabilities for packages: ghostscript...
Denial of Service Vulnerability in Siemens SICAM 8 Products
The SICAM A8000 RTU Remote Terminal Unit is a modular device for remote control and automation applications in all areas of energy supply.SICAM EGS Enhanced Grid Sensors is a gateway for local substations in the distribution network.The SICAM S8000 offers RTU functionality, PLCs, and communicatio...
Multiple Apple Products Cross-Border Access Vulnerability
Apple iOS is an operating system developed for mobile devices. apple tvOS is an operating system for smart TVs. apple iPadOS is an operating system for iPad tablets. An out-of-bounds access vulnerability exists in multiple Apple products, which can be exploited by an attacker to terminate a proce...
Security and Privacy in Virtual and Robotic Assistive Systems: A Comparative Framework
Assistive technologies increasingly support independence, accessibility, and safety for older adults, people with disabilities, and individuals requiring continuous care. Two major categories are virtual assistive systems and robotic assistive systems operating in physical environments. Although...
Linux Distros Unpatched Vulnerability : CVE-2026-4046
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The iconv function in the GNU C Library versions 2.43 and earlier may crash due to an assertion failure when converting inputs from the IBM1390 or IBM1399...
CVE-2026-33983
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, progressivedecompresstileupgrade detects a mismatch via progressiverfxquantcmpequal but only emits WLogWARN, execution continues. The wrapped value 247 is used as a shift exponent, causing undefined behavior...
CVE-2026-21711
A flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket UDS server operations without the required permission checks, while all comparable network paths correctly enforce them. As a result, code running under --permission without --allow-net can create and expose local IP...
CVE-2026-21713
A flaw in Node.js HMAC verification uses a non-constant-time comparison when validating user-provided signatures, potentially leaking timing information proportional to the number of matching bytes. Under certain threat models where high-resolution timing measurements are possible, this behavior...
GHSA-3MFM-83XF-C92R vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, prism, ts-patch, py3-jupyterlab, lerna, rancher-api-ui...
CVE-2026-33941 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, prism, ts-patch, py3-jupyterlab, lerna, rancher-api-ui...
GHSA-9CX6-37PM-9JFF vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, prism, ts-patch, py3-jupyterlab, lerna, rancher-api-ui...
CVE-2026-33938 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, prism, ts-patch, py3-jupyterlab, lerna, rancher-api-ui...
GHSA-XHPV-HC6G-R9C6 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, prism, ts-patch, py3-jupyterlab, lerna, rancher-api-ui...
CVE-2025-59799 vulnerabilities
Vulnerabilities for packages: ghostscript...
CVE-2025-23217 vulnerabilities
Vulnerabilities for packages: mitmproxy...
Addressing the OWASP Top 10 Risks in Agentic AI with Microsoft Copilot Studio
Agentic AI is moving fast from pilots to production. That shift changes the security conversation. These systems do not just generate content. They can retrieve sensitive data, invoke tools, and take action using real identities and permissions. When something goes wrong, the failure is not limit...
CVE-2026-5123
A weakness has been identified in osrg GoBGP up to 4.3.0. This impacts the function DecodeFromBytes of the file pkg/packet/bgp/bgp.go. Executing a manipulation of the argument data1 can lead to off-by-one. The attack may be launched remotely. Attacks of this nature are highly complex. The...