355391 matches found
PT-2026-85389
A weakness has been identified in Dolibarr up to 21.0.4/22.0.5/23.0.3. Affected by this issue is some unknown functionality of the file htdocs/core/filemanagerdol/connectors/php/config.inc.php of the component Legacy File Manager. Executing a manipulation can lead to improper access controls. The...
PT-2026-85529
A vulnerability was detected in valkey-io valkey up to 9.5.4/9.1.0. Affected by this vulnerability is the function createSlotImportJob of the file src/cluster migrateslots.c of the component Slot Migration. The manipulation of the argument job name results in out-of-bounds read. The attack can be...
PT-2026-86192
Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the IPVS IP Virtual Server component where checksum validations are missing or incorrect for certain packet types. Specifically, the ip vs in icmp v6 function fails to...
UBUNTU-CVE-2026-84968
An out-of-bounds read in the BSON decoding component of the MongoDB PHP driver may allow an unauthenticated party who supplies specially formed input to have a small amount of adjacent process memory copied into an error message that is returned to application code. This may result in unintended...
PT-2026-86249
An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component...
PT-2026-85370
A vulnerability was detected in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. Impacted is the function htmlspecialchars decode of the file App/Home/View/Default/Chapter/oneChapter.tpl of the component Chapter Content Output. Performing a...
PT-2026-85398
A vulnerability was identified in Eleveo Quality Management 9.7.0. The affected element is the function QuestionnaireService.runDataExportNow of the component Questionnaire Service. Such manipulation of the argument file name leads to path traversal. The attack may be performed from remote. The...
CVE-2026-78970
JeecgBoot 3.9.2 and earlier contains an authorization bypass vulnerability in the SystemApiController component. An authenticated attacker with any valid JWT token can access multiple API endpoints including queryAllUser, queryUsersByUsernames, queryUserById, and queryUsersByIds to retrieve...
PT-2026-85401
Name of the Vulnerable Software and Affected Versions FreeIPMI versions prior to 1.6.19 Description A stack-based buffer overflow exists in the ipmi-oem component. The issue occurs within the output dell system info cmc info function located in ipmi-oem/ipmi-oem-dell.c, which is triggered when...
Linux Distros Unpatched Vulnerability : CVE-2026-76925
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Flatpak. A Time-of-check to time-of-use TOCTOU race condition exists in the org.freedesktop.Flatpak.SystemHelper component. This vulnerabili...
The vulnerability of the TableNG component of the Grafana monitoring and observation platform allows a hacker to execute arbitrary code.
The vulnerability of the TableNG component of the Grafana monitoring and observation platform is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
UBUNTU-CVE-2026-84963
An incorrect numeric conversion in the JSON parsing component of the MongoDB C Driver's BSON library may cause an unusually large text value to be silently shortened, or the corresponding field to be omitted, while the parsing operation still reports success and returns no error. An unauthenticat...
The vulnerability of the EXPORT_SYMBOL_GPL() function in the net/netfilter/nfnetlink.osf.c module of the Linux kernel’s netfilter component, which allows a hacker to cause a service failure.
The vulnerability of the EXPORTSYMBOLGPL function in the net/netfilter/nfnetlink.osf.c module of the netfilter kernel of the Linux operating system is related to pointer manipulation. Exploitation of this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the aa_sock_msg_perm() function in the security/apparmor/lsm.c module of the AppArmor security component for the Linux operating system allows a attacker to compromise the confidentiality and integrity of the protected information.
The vulnerability of the aasockmsgperm function in the security/apparmor/lsm.c module of the AppArmor security component of the Linux operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrit...
HPESBHF05128 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01423, 2026.3 IPU, Intel Processor Load Value Injection Zero Data Advisory, Local Disclosure of Information Vulnerability
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to 2.7008-19-2026 HPE StoreEasy 1860 Storage - Prior to 2.7008-19-2026 HPE StoreEasy 1670 Expanded Storage - Prior to 2.7008-19-2026 CVSS...
PT-2026-85394
A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. The manipulation of the argument labels results in denial of service. The attack can be executed...
PT-2026-86239
A security vulnerability has been detected in jofpin trape 2.0. This vulnerability affects unknown code of the file core/user.py of the component Telemetry Endpoint. Such manipulation of the argument vId leads to race condition. The attack can be executed remotely. Attacks of this nature are high...
CVE-2026-71622
CVE-2026-71622 is a SQL injection vulnerability in APiAdmin v.5.0.1 (Zhao-github), located in the User.php component. A remote attacker can exploit it to obtain sensitive information . No CVSS metrics, confirmed exploit, or vendor-published fix are provided in the available documents. The entry i...
PT-2026-85395
A vulnerability was determined in Eleveo Quality Management 9.7.0. Impacted is an unknown function of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. This manipulation of the argument createdBy causes dynamically-determined object attributes. The attack ...
