171668 matches found
CVE-2026-75900
An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...
CVE-2026-75900
swtpm's SWTPM_NVRAM_CheckHeader() validates buffer length against sizeof(pointer) instead of sizeof(struct), allowing an undersized buffer to pass and cause a 2-byte heap overread (6 bytes on 32-bit). Impact: daemon termination and heap data leakage to logs. Red Hat reports no mitigation; fixed i...
CVE-2026-58085
The FreeBSD wg(4) WireGuard driver failed to check the Poly1305 MAC verification result after OCF decryption, silently accepting forged packets. Affects all supported FreeBSD versions; corrected in stable/14, stable/15, and releng branches. No workaround exists; upgrade and reboot. pfSense Plus &...
CVE-2026-75900
An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...
EUVD-2026-62291
The Membership For WooCommerce WordPress plugin before 3.1.2 does not check that an API consumer secret has actually been generated before comparing it against the one supplied in a request, allowing unauthenticated attackers to reach its REST routes and disclose any user's membership plan detail...
EUVD-2026-62280
The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX actions, allowing users with a Subscriber account to create an unlimited number of options in the database, each of which is loaded on every page request...
CVE-2026-18466
WP Maps WordPress plugin versions before 4.9.8 contain a missing authorization flaw in one of its AJAX actions. The endpoint lacks both a capability check and nonce validation , allowing any authenticated user with the lowest-level Subscriber role to create an unlimited number of autoloaded optio...
CVE-2026-18466 WP Maps < 4.9.8 - Subscriber+ Unlimited Autoloaded Option Creation
The WP Maps WordPress plugin before 4.9.8 does not perform a capability check, nor validate a nonce, in one of its AJAX actions, allowing users with a Subscriber account to create an unlimited number of options in the database, each of which is loaded on every page request...
CVE-2026-18051 W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key
The W3 Total Cache WordPress plugin before 2.10.5 does not properly validate the request path it uses to build cache file names, allowing unauthenticated attackers to write a file into any existing directory on the server, inside or outside the web root, overwriting whatever occupies the target...
EUVD-2026-62241
The ZFSIOCSETPROP ioctl, used by zfs-set8, incorrectly validated the calling user such that an unprivileged user is able to set metadata on a dataset indicating that the dataset has received properties from a zfs-recv8 stream. Any local user can set the internal ZFS metadata flag "$hasrecvd" on...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation through TransportSocketSnapshot in xds/src/main/java/com/linecorp/armeria/xds/TransportSocketSnapshot.java. An attacker can perform a man-in-the-middle attack against an xDS-managed upstream connection by...
EUVD-2026-62194
An improper input validation vulnerability in the configuration service for processing encrypted credential data has been identified in Tapo C200 v5. An attacker can send oversized crypted ciphertext values that may trigger exception handling failures, due to insufficient validation, causing the...
EUVD-2026-62193
Tapo C200 v5 contains an improper authentication vulnerability within the login authentication verification module. An attacker on the local network can exploit weaknesses in challenge parameter validation to bypass normal authentication controls and obtain administrative session tokens. Successf...
PT-2026-78495
A vulnerability in Cisco Packaged Contact Center Enterprise Packaged CCE and Cisco Unified Contact Center Enterprise Unified CCE could allow an authenticated, remote attacker to conduct server-side request forgery SSRF attacks through an affected device. This vulnerability is due to improper inpu...
PT-2026-78493
A vulnerability in the web-based management interface of Cisco Industrial Ethernet IE 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of...
perl-Date-Manip security update
6.94-5.1 - Fix CVE-2026-60075: prevent quadratic-cost regex DoS in date/time parsing by rejecting overly long input strings Resolves: RHEL-239790...
ROS-20260819-73-0045
The vulnerability in containerd is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
ROS-20260819-73-0044
The vulnerability in perl-Image-ExifTool is related to insufficient neutralization of special elements in the request. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
RDK-B WebUI contains multiple vulnerabilities
Overview RDK Central RDK-B WebUI version, rdkb-2025q4-kirkstone, contains multiple vulnerabilities involving memory corruption, improper authentication, race conditions, and insufficient input validation. An attacker with network access to an affected WebUI may be able to bypass authentication,...
