490244 matches found
CVE-2026-86075
creationtimestamp| type| source ---|---|--- 2026-09-09 10:56:59+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-7 2026-09-12 14:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdavovp6c25...
CVE-2025-3271
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...
CVE-2026-87795
zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can supply untrusted offset or length values to read native heap memory into the compression dictionary, typically causing JVM crashe...
CVE-2025-3271
CVE-2025-3271 is attributed in the initial record to a DOM-based XSS in OpenText Documentum Webtop versions prior to 16.7.1 , rated CVSS 4.0 4.8 (MEDIUM) requiring low privileges and active user interaction with low impact on confidentiality and integrity. A connected PT Security entry (PT-2025-2...
CVE-2025-3271 DOM-based XSS vulnerability in OpenText™ Documentum Webtop
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...
CVE-2026-80055
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application editions contain an LDAP Injection vulnerability in versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). An unauthenticated attacker with remote access could exploit this flaw to achieve script injection . The CNA-a...
WordPress WP plugin Hostgator plugin <= 3.2.0 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by sorin vasile in WordPress Plugin WP Plugin Hostgator versions = 3.2.0...
CVE-2026-81741
The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.7.2 does not restrict the redirect target of its email preference confirmation flow to the site's own host, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL by way of a crafte...
MAL-2026-16071 Malicious code in cat-sis2go-utils (npm)
cat-sis2go-utils is a dependency-confusion package published against the SIS2GO namespace, with versions inflated to 99.0.0 and 99.1.0. It ships no library code index.js is an 87-byte stub, and package.json declares both preinstall and postinstall running node scripts/run.js, so the payload...
CVE-2026-87733
An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions P256,P384,P521.Dsa.pubofoctets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key...
UBUNTU-CVE-2026-87735
An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption...
CVE-2026-21107
Out-of-bounds write in Samsung Notes prior to version 4.4.45.5 allows local attackers to write out-of-bounds memory...
CVE-2026-21107
CVE-2026-21107 is an out-of-bounds write vulnerability in Samsung Notes prior to version 4.4.45.5 , allowing a local attacker with low privileges to write to out-of-bounds memory. The CVSS 4.0 base score is 6.9 (MEDIUM) , with a local attack vector, low complexity, and no user interaction require...
CVE-2026-87735
An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption...
ROOT-OS-DEBIAN-12-CVE-2025-68371 CVE-2025-68371 in linux - Patched by Root
Root has patched CVE-2025-68371 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2021-3847 CVE-2021-3847 in linux - Patched by Root
Root has patched CVE-2021-3847 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-31655 CVE-2026-31655 in linux - Patched by Root
Root has patched CVE-2026-31655 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-71073 CVE-2025-71073 in linux - Patched by Root
Root has patched CVE-2025-71073 in the linux package for Root:Debian:12. Multiple fixed versions available...