44264 matches found
CTEK Chargeportal
RISK EVALUATION Successful exploitation of these vulnerabilities could enable attackers to gain unauthorized administrative control over vulnerable charging stations or disrupt charging services through denial-of-service attacks. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...
CVE-2026-1525 vulnerabilities
Vulnerabilities for packages: pelias-api, kibana, code-server, librechat, jitsucom-jitsu, langfuse, gemini-cli, renovate, langfuse-fips...
CVE-2026-2046
Unknown description...
VulnCheck KEV: CVE-2025-32975
Quest KACE Systems Management Appliance SMA contains an improper authentication vulnerability that could allow attackers to impersonate legitimate users without valid credentials...
Cyber-Resilient Digital Twins: Discriminating Attacks for Safe Critical Infrastructure Control
Industrial Cyber-Physical Systems ICPS face growing threats from cyber-attacks that exploit sensor and control vulnerabilities. Digital Twin DT technology can detect anomalies via predictive modelling, but current methods cannot distinguish attack types and often rely on costly full-system...
CVE-2026-23251
In the Linux kernel, the following vulnerability has been resolved: xfs: only call xfarray,blobdestroy if we have a valid pointer Only call the xfarray and xfblob destructor if we have a valid pointer, and be sure to null out that pointer afterwards. Note that this patch fixes a large number of...
GHSA-XPQW-6GX7-V673 vulnerabilities
Vulnerabilities for packages: vitess...
GHSA-JR27-M4P2-RC6R vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, mlflow, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, k8s-sidecar, airflow, superset, py3-cassandra-medusa, datadog-agent, kubeflow-pipelines...
CVE-2026-27448 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, request-1276, az, localstack, gitlab-cng-fips, awx, datahub-ingestion, mitmproxy, airflow, authentik, keep, ggshield, keep-fips, dbt-snowflake, superset, authentik-fips, datadog-agent, gitlab-cng, datadog-agent-fips...
Linux Distros Unpatched Vulnerability : CVE-2026-26740
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : snapd vulnerability (USN-8102-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8102-1 advisory. Qualys discovered that snapd incorrectly handled certain operations in the snap's private /tmp directory. ...
Linux Distros Unpatched Vulnerability : CVE-2025-34297
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KissFFT versions prior to the fix commit 1b083165 contain an integer overflow in kissfftalloc in kissfft.c on platforms where sizet is 32-bit. The nfft paramete...
CVE-2026-20643
A cross-origin issue in the Navigation API was addressed with improved input validation. This issue is fixed in Background Security Improvements for iOS, iPadOS, and macOS, Safari 26.4, iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Tahoe 26.4, visionOS 26.4. Processing maliciously...
CVE-2026-4359
A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver...
music-metadata has an infinite loop vulnerability in ASF parser
Summary music-metadata's ASF parser parseExtensionObject in lib/asf/AsfParser.ts:112-158 enters an infinite loop when a sub-object inside the ASF Header Extension Object has objectSize = 0. Root Cause When objectSize is 0: 1. remaining = 0 - 24 = -24 2. tokenizer.ignore-24 moves the read position...
Infinite loop
Overview music-metadata is a Music metadata parser for Node.js, supporting virtual any audio and tag format. Affected versions of this package are vulnerable to Infinite loop through the parseExtensionObject process in the ASF parser when handling a sub-object with objectSize = 0. An attacker can...
CVE-2025-15584
Netskope was notified about a potential gap in its Endpoint DLP Module for Netskope Client on Windows systems. The successful exploitation of the gap can potentially allow an unprivileged user to trigger an integer overflow within the filter communication port, leading to a Blue-Screen-of-Death...
CVE-2010-5250
creationtimestamp| type| source ---|---|--- 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...