130521 matches found
ROS-20260727-73-0017
A vulnerability in Gitea related to a lack of protection for internal data. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to protected information...
CVE-2026-66018: Exposure of Sensitive Information to an Unauthorized Actor
Build readers can access another repository's environment properties. A caller with read access to an ordinary repository can select a readable repository parameter while retrieving environment properties for a protected build, exposing build environment secrets confidentiality impact; no integri...
PT-2026-65059
An input validation vulnerability exists in an API component of the orchestrator. An authenticated user can exploit this flaw to manipulate backend queries, which may result in unauthorized access to data beyond their intended privileges and cause the underlying system to initiate unintended...
Xerox AltaLink Abuse Scan Feature to Delete Files (CVE-2021-28670)
Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk. This plugin only works...
PT-2026-65011
Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally...
ROS-20260727-73-0019
A vulnerability in Gitea related to flaws in the authorization mechanism. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to sensitive information...
Linux Distros Unpatched Vulnerability : CVE-2026-13060
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user with limited read privileges may be able to access documents from collections they are not authorized to read, due to an inconsistency in...
CVE-2026-66028: Incorrect Implementation of Authentication Algorithm
Ekushey Project Manager CRM through version 5.0 contains a missing uniqueness constraint vulnerability that allows authenticated administrators to create duplicate client accounts with identical email and password credentials. Attackers can exploit the lack of email field uniqueness enforcement t...
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An...
PT-2026-65089
Name of the Vulnerable Software and Affected Versions Ekushey Project Manager CRM versions prior to 5.1 Description A missing uniqueness constraint allows authenticated administrators to create duplicate client accounts using identical email and password credentials. The lack of enforcement on th...
PT-2026-64862
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an...
VulnCheck KEV: CVE-2025-68686
Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An...
CVE-2026-65894: Improper Restriction of Excessive Authentication Attempts
This vulnerability exists in CP PLUS EZ-P21 IP Camera due to improper authentication of HTTP endpoints. A remote attacker could exploit this vulnerability by conducting brute-force attacks against HTTP endpoint on the targeted device. Successful exploitation of this vulnerability could allow an...
PT-2026-65019
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-65029
Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally...
PT-2026-65031
Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...
PT-2026-65108
Improper URL validation when handling specific URLs, allows an attacker, under certain conditions, to make unauthorized requests from JFrog Artifactory, potentially exposing internal services and cached response data...
CVE-2026-12001: Use of Hard-coded Credentials
A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5. Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through...
ROS-20260727-73-0008
A vulnerability in apache-activemq related to an incorrect restriction on the path name to a restricted directory. Exploitation of this vulnerability could allow a remote attacker to gain unauthorized access to protected information...