119127 matches found
EUVD-2026-58754
Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-72970
Technical details about CVE-2026-72970 are not publicly available in the provided documents. Monitor official vendor advisories and security bulletins for updates.
EUVD-2026-58743
A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database...
CVE-2026-19680
A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database...
CVE-2026-19680 SQL Injection
A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database...
CVE-2026-19680
CVE-2026-19680 is a SQL injection vulnerability in Security Center that could allow an attacker to access unauthorized data from the application's database. The public records show a high-severity impact with CVSS metrics indicating network access and low privileges required. Tenable’s advisory f...
EUVD-2026-58733
A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials...
SUSE-SU-2026:3622-1 Security update for java-1_8_0-openjdk
This update for java-180-openjdk fixes the following issues: - CVE-2026-41254: lcms2: Information disclosure or denial of service via integer overflow in CubeSize bsc1272459. - CVE-2026-46968: unauthorized creation, deletion or modification access to critical data bsc1272224. - CVE-2026-47010:...
CVE-2026-19629
A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized...
CVE-2026-63702
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-73626
A flaw was found in JupyterLab where a missing 'await' in the PyPIExtensionManager.install function could lead to an allowlist/blocklist enforcement gap. This vulnerability allows direct callers of install to bypass security checks, potentially enabling the installation of unauthorized extensions...
CVE-2026-63702
Dell Wyse Management Suite (WMS) versions prior to 2605.0.2 are affected by CVE-2026-63702, a Use of Hard-coded Credentials vulnerability that allows a local, low-privilege attacker to gain unauthorized access. Root cause: hard-coded credentials. Impact is unauthorized access with high confidenti...
EUVD-2026-58681
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-63702
Dell Wyse Management Suite WMS, versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-73558
A flaw was found in vLLM, an inference and serving engine for large language models. An integer overflow vulnerability in the actandmulkernel kernel allows a remote attacker to cause cross-user data leakage. By crafting specific requests processed in the same inference batch, an attacker can obta...
CVE-2026-16772 CVE-2026-16772
In Akaunting versions sync call without verifying whether the caller is authorized to manage roles. Users only require the default update-auth-profile permission to access the self-update path and assign themselves as admins. The API endpoints are properly permission‑gated and are not affected by...
EUVD-2026-58679
A vulnerability was identified in Webkul Bagisto up to 2.4.4. Affected by this vulnerability is an unknown functionality of the component Customer Item Deletion Endpoint. Such manipulation leads to improper access controls. The attack can be launched remotely. The exploit is publicly available an...
MINI-92X7-695J-FQVV
Bulletin has no description...