490151 matches found
Astra Linux – Vulnerability in openssl1.0
Calls to the EVPCipherUpdate, EVPEncryptUpdate, and EVPDecryptUpdate functions may cause the output length argument to overflow in some cases where the input length is close to the maximum permissible length for integers on the platform. In such cases, the return value from the function call will...
Astra Linux – Vulnerability in OpenLDAP
An integer underflow was discovered in OpenLDAP before version 2.4.57, which led to slapd crashes during the Certificate Exact Assertion processing, resulting in a denial of service schemainit.c serialNumberAndIssuerCheck...
Astra Linux – Vulnerability in Python 3.7, Python 2.7
A issue was discovered in Python before version 3.11.1. An unnecessary quadratic algorithm exists in one path when processing certain inputs to the IDNA RFC 3490 decoder. This could lead to a CPU denial of service if a maliciously crafted, unreasonably long hostname was provided to the decoder...
CVE-2026-90703
CVE-2026-90703 is an OS command injection vulnerability in the D-Link DWR-M921 (firmware 1.1.52 ). The vulnerable element is the system function within the /boafrm/formDiskCreateShare handler; an attacker can manipulate the folderpath argument to inject arbitrary OS commands. The attack is remote...
CLSA-2026-1789377909 TuxCare security update for send (2 CVEs)
TuxCare rebuilt send to address 2 CVEs. Fixed in 0.0.4-tuxcare.1...
CLSA-2026-1789375936 TuxCare security update for org.apache.httpcomponents.core5 (1 CVE)
TuxCare rebuilt 5 org.apache.httpcomponents.core5 packages to address 1 CVE. Fixed in 5.3.4-tuxcare.1...
WordPress Mobile Events Manager plugin <= 1.4.8.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Enrico Marcolini Dottor Marc, Claudio Marchesini Dottor Marc in WordPress Plugin Mobile Events Manager versions = 1.4.8.3...
WordPress wpstorecart plugin <= 5.0.7 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability discovered by reconnaissance in WordPress Plugin WPStoreCart versions = 5.0.7...
WordPress SAMO Forms plugin <= 1.0.0 - Unauthenticated SQLi vulnerability
Unauthenticated SQLi vulnerability discovered by João Ramos Maciel in WordPress Plugin SAMO Forms versions = 1.0.0...
WordPress Gpx2Graphics plugin <= 0.3 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Huynh Kien Minh in WordPress Plugin Gpx2Graphics versions = 0.3...
CVE-2026-90681
A weakness has been identified in Matthias-Wandel jhead up to 3.3. This affects the function Get16u of the file exif.c of the component EXIF Parsing. This manipulation causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used...
PT-2026-91042
A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...
CVE-2023-45858
CVE-2023-45858 is a directory traversal vulnerability in Paessler PRTG versions prior to 23.4.88.1429 , allowing an unauthenticated, remote attacker to read local files. The CVSS v3.1 score is 8.6 (HIGH) with a changed scope and high confidentiality impact , while integrity and availability are u...
PT-2026-91433
Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.0 IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.27 Description Insecure deserialization allows a local attacker to execute arbitrary code. Deserialization is the proces...
CVE-2023-28148
Paessler PRTG Network Monitoring is affected by a bodyclass Cross-Site Scripting (XSS) vulnerability in versions prior to 23.3.86.1520 . The vulnerability allows an attacker to inject scripts via the body class parameter, with a CVSS 3.1 score of 7.2 (HIGH) (AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N), ...
PT-2026-91449
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability t...
CVE-2023-28148
A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...
CVE-2023-28148
A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...
PT-2026-91728
Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.6 1 IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.2 IBM Sterling File Gateway versions 6.2.2.0 through 6.2.2.1 Description Improper access control allows a remote attacker to...