490102 matches found
CVE-2023-28148
A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...
EUVD-2023-60643
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when an unusually long move is executed...
PT-2026-92181
Name of the Vulnerable Software and Affected Versions znc versions prior to 1.10.3-1.1 Description Security issues were identified and subsequently fixed in the znc-1.10.3-1.1 package on the GA media of openSUSE Tumbleweed. Recommendations Update to version 1.10.3-1.1...
CVE-2023-37252
CVE-2023-37252 affects the CheckUser extension for MediaWiki through version 1.39.3 . The Special:CheckUserLog page displays usernames that were intended to be hidden, resulting in an information disclosure to users with low privileges. The CVSS 3.1 base score is 3.1 (LOW) with a network attack v...
PT-2026-91433
Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.0 IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.27 Description Insecure deserialization allows a local attacker to execute arbitrary code. Deserialization is the proces...
PT-2026-92182
Name of the Vulnerable Software and Affected Versions znc versions prior to 1.10.3-1.1 Description Security issues were identified and subsequently fixed in the znc-1.10.3-1.1 package on the GA media of openSUSE Tumbleweed. Recommendations Update to version 1.10.3-1.1...
CVE-2023-24287
Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command...
PT-2026-91255
Name of the Vulnerable Software and Affected Versions GPAC versions prior to abi-16.23 Description A use after free issue exists in the MP4Box component within the gf node get name function of the scenegraph/base scenegraph.c file. This flaw allows a remote attacker to trigger the condition throu...
PT-2026-91449
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability t...
PT-2026-91426
IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features...
PT-2026-91422
IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability...
PT-2026-91728
Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.6 1 IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.2 IBM Sterling File Gateway versions 6.2.2.0 through 6.2.2.1 Description Improper access control allows a remote attacker to...
PT-2026-91453
IBM WebSphere Application Server 9.0, and 8.5 is affected by a reflected cross-site scripting vulnerability...
PT-2026-91182
A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravity json.c of the component udp json-parser. Such manipulation leads to integer overflow. The attack may be performed from remote. The exploit has been...
CVE-2026-36989
A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php...
CVE-2026-90783
MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...
CVE-2026-90678
An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured with a QUIC bind listener, and the affected traffic must reach a backend over HTTP/1.1 using chunked transfer...
PT-2026-90960
Name of the Vulnerable Software and Affected Versions LuxSoft LuxCal versions prior to 5.3.4L Description A SQL Injection issue exists where an attacker can interfere with the queries that an application makes to its database. This occurs via the 'rssfeed.php' and 'common/retrieve.php' endpoints...
