357234 matches found
PT-2026-88139
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
PT-2026-87602
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
PT-2026-87076
A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the file web src/public/editor.md/editormd.js of the component API Page Save Endpoint. Executing a manipulation can lead to cross site scripting. The attack may be launched remotely. The...
PT-2026-86999
Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-0...
PT-2026-88319
A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function is within roots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name:...
PT-2026-87015
Command Argument Injection Vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before...
PT-2026-87527
Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...
CVE-2026-79573
L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the busid, id, and taskid parameters. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...
AlmaLinux 8 : xmlrpc-c (ALSA-2026:64772)
The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:64772 advisory. xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVE-2026-15928 Tenable has extracted the preceding description block directly from the...
PT-2026-87111
L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the busid, id, and taskid parameters. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...
PT-2026-87366
Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
PT-2026-87156
A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during curso...
PT-2026-87985
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
PT-2026-87915
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
PT-2026-87521
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
PT-2026-87782
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
RHEL 9 : thunderbird (RHSA-2026:65158)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:65158 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the Graphics:...
EulerOS 2.0 SP12 : acl (EulerOS-SA-2026-3321)
According to the versions of the acl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : acl before version 2.4.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability that allows local attackers to escalate privileg...
EulerOS 2.0 SP12 : attr (EulerOS-SA-2026-3323)
According to the versions of the attr packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attackers to escalate...