3466 matches found
SAP NetWeaver Memory Corruption (3747649)
The version of the SAP NetWeaver kernel detected on the remote host is affected by a memory corruption vulnerability as referenced in SAP Security Note 3747649: - A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an...
PT-2026-88961
Name of the Vulnerable Software and Affected Versions Dell SCG 5.0 Appliance versions prior to 5.36.00.16 Dell SCG 5.0 Application versions prior to 5.36.00.00 Description A Time-of-check Time-of-use TOCTOU Race Condition exists, which occurs when a program checks the state of a resource and then...
PT-2026-89062
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...
PT-2026-88976
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized...
PT-2026-88927
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism...
PT-2026-88762
The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrm contact dropdown Parameter in all versions up to, and including, 1.7.5 due to insufficient input sanitization and output escaping. This mak...
PT-2026-88974
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization 'Race Condition' vulnerability. An unauthenticated attacker with remote access could potentially explo...
PT-2026-88977
Name of the Vulnerable Software and Affected Versions Dell SCG 5.0 Appliance versions prior to 5.36.00.16 Dell SCG 5.0 Application versions prior to 5.36.00.00 Description A Time-of-check Time-of-use TOCTOU Race Condition exists, which occurs when a program checks the state of a resource and then...
PT-2026-89109
Name of the Vulnerable Software and Affected Versions MaxSite CMS versions prior to 109.7 Description The software contains a hardcoded session encryption key within the application/config/config.php file that remains unchanged after installation. This allows unauthenticated attackers to forge...
PT-2026-88967
Name of the Vulnerable Software and Affected Versions Dell SCG 5.0 Appliance versions prior to 5.36.00.16 Dell SCG 5.0 Application versions prior to 5.36.00.00 Description A Relative Path Traversal issue exists where an unauthenticated attacker with remote access can gain unauthorized access to t...
Security Advisory 0161
Security Advisory 0161 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-73450 CVSSv3.1 Base Score: 6.9...
Security Advisory 0160
Security Advisory 0160 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added Description All of the CVEs covered in this advisory apply to affected platforms running Arista EOS with...
Security Advisory 0171
Security Advisory 0171 . CSAF PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release 1.1 | September 22, 2026 | CSAF JSON file added The CVE-ID tracking this issue: CVE-2026-73435 CVSSv3.1 Base Score: 8.2...
PT-2026-88944
Name of the Vulnerable Software and Affected Versions Parse Server versions prior to 8.6.88 Parse Server versions 9.0.0 through 9.10.1-alpha.6 Description An authentication bypass exists in the built-in LDAP authentication adapter. The adapter forwards the client-supplied password to the director...
CVE-2026-69671
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
CVE-2026-67376
Integer overflow or wraparound in SQL Server allows an unauthorized attacker to deny service over a network...
CVE-2026-83992
CVE-2026-83992 is a heap-based buffer overflow in Windows Imaging Component that allows an unauthorized attacker to execute code over a network. The vulnerability carries a CVSS 3.1 base score of 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network reachability with low ...
EUVD-2026-73862
Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
CVE-2026-80085
CVE-2026-80085 is a heap-based buffer overflow in Microsoft Office Word that allows an unauthorized attacker to achieve remote code execution over a network. The attack requires user interaction (e.g., opening a crafted document) but no prior authentication, yielding high impact to confidentialit...