115760 matches found
EUVD-2026-56113
A vulnerability has been identified in Solid Edge SE2025 All versions V225.0 Update 15, Solid Edge SE2026 All versions V226.0 Update 7. The affected applications contain a use-after-free vulnerability that could be triggered while parsing specially crafted DFT files. This could allow an attacker ...
sp-im (>=0.2.0, <=0.3.0), yatima-core (>=0.1.0, <=0.1.1) potentially affected by unknown CVE via sp-sized-chunks (0.1.0)
sp-sized-chunks CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on sp-sized-chunks and may be impacted: - sp-im =0.2.0, =0.1.0, =0.1.1 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0254...
CVE-2026-58235 Use of Vulnerable Third-Party Component in SAP NetWeaver AS Java (Adobe Document Services)
SAP NetWeaver Application Server Java Adobe Document Service uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions. A low-privileged authenticated attacker could potentially leverage these weaknesses against the affected...
PT-2026-70892
Name of the Vulnerable Software and Affected Versions Faker versions prior to 10.5.0 Description The faker.helpers.fake method in src/modules/helpers/eval.ts allows attacker-controlled fake templates to access the Function constructor through fakeEval.resolveProperty when a function returns anoth...
3-04-2025-ttm (0.1.0), a2 (>=0.10.5, <=0.10.13) +3345 more potentially affected by CVE-2026-69112 via accelerate (>=0.5.1, <=1.14.0)
accelerate PYPI version =0.5.1, =0.10.5, =5.0.0, =5.0.6 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 - aait-store-cut-part-003 0.0.1 - aait-store-cut-part-004 0.0.1 - aait-store-cut-part-005 0.0.1 - aait-store-cut-part-006 0.0.1 - aait-store-cut-part-007 0.0.1 -...
pt-platform__DVWA
DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...
GHSA-R28C-9Q8G-F849
creationtimestamp| type| source ---|---|--- 2026-08-10 19:39:38+00:00| seen| https://gist.github.com/klemmanton-lgtm/4a24aedae8017b5aebed0300d07c7ee9 2026-08-10 19:39:38+00:00| seen| https://gist.github.com/klemmanton-lgtm/8b54bdd2fe9905dc89b9c8ccf42f5fc4 2026-08-17 10:21:36+00:00| seen|...
CVE-2026-15060
CVE-2026-15060 : The vulnerability affects systemd-machined on desktop systems running version ≥ v259 (or v258 with a local policy that permits the polkit action register-machine). An unprivileged user in a desktop graphical session can kill arbitrary processes, including privileged ones. Affecte...
CVE-2026-64941
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in phoenixframework phoenixliveview allows an attacker to send a victim's browser to an origin of the attacker's choosing via a :to value containing ASCII tab, LF or CR. redirect/2 validates :to through the private validatelocalurl!/...
CVE-2026-64941 Open redirect in Phoenix.LiveView.validate_local_url!/2 via ASCII tab, LF and CR
URL Redirection to Untrusted Site 'Open Redirect' vulnerability in phoenixframework phoenixliveview allows an attacker to send a victim's browser to an origin of the attacker's choosing via a :to value containing ASCII tab, LF or CR. redirect/2 validates :to through the private validatelocalurl!/...
PYSEC-2026-3629 Keras: HDF5 virtual datasets can disclose local files
Keras versions up to and including 3.13.2 are vulnerable to an arbitrary HDF5 file read due to an incomplete fix for CVE-2026-1669. The vulnerability resides in the H5IOStore.verifydataset and fileeditor.py methods, which fail to check the dataset.isvirtual property of HDF5 datasets. This allows ...
EUVD-2026-55252
Privilege Escalation via URL Parameter is reported in Apache Ranger versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-65942 Apache Ranger: Clients accept TLS certificates issued for other hostnames
TLS hostname verification issue in Apache Ranger Client Code in versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
Metabase-Exploit
Metabase SQL Injection Zero-Day Exploit GHSA-vwf4-m7j8-wcjf...
WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Septio Noerdiansyah in WordPress Plugin FluentCommunity versions = 2.7.5...
CVE-2026-18030
The BricksForge WordPress plugin before 3.1.8.8 does not verify the identity of the requester when processing a password change submitted through one of its form actions, allowing unauthenticated attackers to set an arbitrary password for any user, including administrators, and take over their...
CVE-2026-18786
The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and unconditionally discards the authentication error raised for any request whose URI merely contains a CheckView WordPress plugin before 2.3.2-specific string, making it possible f...
VulnCheck KEV: CVE-2026-66443
Unauthenticated Sensitive Data Exposure in REST API Log = 1.7.1 versions...
Photon OS 5.0: Python3 PHSA-2023-5.0-91-0093
An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0093. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
