CVE-2020-36943

CVE-2020-36943 affects aSc TimeTables 2021.6.2. The vulnerability is a denial-of-service caused by overwriting subject title fields with excessive data, allowing an attacker to trigger instability or a potential crash by pasting a 10,000‑character buffer into the subject title. Public documents c...

CVE-2020-36986

creationtimestamp| type| source ---|---|--- 2026-01-28 14:04:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdigwkb7bd2i...

CVE-2026-1298

creationtimestamp| type| source ---|---|--- 2026-01-28 09:22:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdhx5umgpc2t...

PT-2026-5056

Official Document Management System developed by 2100 Technology has a Incorrect Authorization vulnerability, allowing authenticated remote attackers to modify front-end code to read all official documents...

Oracle Linux 9 : python3.12 (ELSA-2026-1408)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-1408 advisory. - Security fix for CVE-2025-13836 Resolves: RHEL-141026 Tenable has extracted the preceding description block directly from the Oracle Linux security...

EUVD-2020-30864

TapinRadio 2.13.7 contains a denial of service vulnerability in the application proxy settings that allows attackers to crash the program by overflowing input fields. Attackers can paste a large buffer of 20,000 characters into the username and address fields to cause the application to become...

EUVD-2020-30858

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash...

CVE-2020-36940

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash...

CVE-2025-59097

The exos 9300 application can be used to configure Access Managers e.g. 92xx, 9230 and 9290. The configuration is done in a graphical user interface on the dormakaba exos server. As soon as the save button is clicked in exos 9300, the whole configuration is sent to the selected Access Manager via...

CVE-2022-32086

creationtimestamp| type| source ---|---|--- 2026-01-27 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02...

CLSA-2026-1769506798 cups: Fix of CVE-2025-58436

CVE-2025-58436: fix issue where slow messages could delay cupsd...

PT-2026-4922

Easy CD & DVD Cover Creator 4.13 contains a buffer overflow vulnerability in the serial number input field that allows attackers to crash the application. Attackers can generate a 6000-byte payload and paste it into the serial number field to trigger an application crash...

CVE-2025-59092 Unauthenticated RPC Service in dormakaba Kaba exos 9300

An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterface.exe. This service is used for interprocess communication between services and the Kaba exos 9300 GUI, containing status information about the Access Managers. Interacting with the...

CVE-2025-59092

CVE-2025-59092 describes an unauthenticated RPC service in the dormakaba exos 9300 ecosystem. The affected component is an RPC service reachable on port 4000 run by FSMobilePhoneInterface.exe, used for interprocess communication with the exos 9300 GUI and containing status information about Acces...

EUVD-2025-206353

An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterface.exe. This service is used for interprocess communication between services and the Kaba exos 9300 GUI, containing status information about the Access Managers. Interacting with the...

CVE-2026-23000

creationtimestamp| type| source ---|---|--- 2026-01-25 15:21:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdaztjfncm2n 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-06-01 18:00:00+00:00| seen|...

CVE-2021-47895

Nsauditor 3.2.2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Event Description field with a large buffer. Attackers can generate a 10,000-character 'U' buffer and paste it into the Event Description field to trigger an application...

EUVD-2026-4295

BloofoxCMS 0.5.2.1 contains a stored cross-site scripting vulnerability in the articles text parameter that allows authenticated attackers to inject malicious scripts. Attackers can insert malicious javascript payloads in the text field to execute scripts and potentially steal authenticated users...

CVE-2021-47895

Nsauditor 3.2.2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Event Description field with a large buffer. Attackers can generate a 10,000-character 'U' buffer and paste it into the Event Description field to trigger an application...

CVE-2021-47895 Nsauditor 3.2.2.0 - 'Event Description' Denial of Service

Nsauditor 3.2.2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Event Description field with a large buffer. Attackers can generate a 10,000-character 'U' buffer and paste it into the Event Description field to trigger an application...