EUVD-2026-9503

Vaultwarden's Collection Management Operations Allowed Without manage Verification for Manager Role...

MINI-WRRW-74C4-48GP

Bulletin has no description...

MINI-W8PF-5G49-4MPM

Bulletin has no description...

MINI-VJ2R-WVQJ-5FVF

Bulletin has no description...

MINI-R4F5-752H-7829

Bulletin has no description...

MINI-JJP8-3GG5-HCHW

Bulletin has no description...

MINI-J7C6-M5GC-PFJM

Bulletin has no description...

MINI-HQ2C-F756-WC8R

Bulletin has no description...

MINI-G56Q-788C-WV84

Bulletin has no description...

MINI-8VVF-G4CC-RWJG

Bulletin has no description...

MINI-CHR3-WHP8-9P6F

Bulletin has no description...

MINI-2565-CJVF-394C

Bulletin has no description...

CVE-2026-20100: Buffer Copy without Checking Size of Input

A vulnerability in the LUA interperter of the Remote Access SSL VPN feature of Cisco Secure Firewall Adaptive Security Appliance ASA Software and Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with a valid VPN connection to cause the device to reload...

Trend Micro Apex One Console Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Apex One console, which listens on TCP ports 8080 and 4343 by default. The issu...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the PasswordHash API endpoint. An attacker can exhaust server memory and cause service disruption by sending multiple concurrent requests to trigger excessive memory allocation...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to improper cleanup in error paths within resource extraction and scanning processes. An attacker can degrade system availability by causing resource leaks and exhausting file...

CVE-2026-0015

In multiple locations of AppOpsService.java, there is a possible persistent denial of service due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-9228

In onTransact of IDrmManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48582

In multiple locations, there is a possible way to delete media without the MANAGEEXTERNALSTORAGE permission due to an intent redirect. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution

Impact Vulnerability Type: Local Privilege Escalation LPE / Improper Privilege Management / Arbitrary Command Execution. The application automatically re-executes the previously failed command but does not properly drop elevated privileges during this process. When the tool is executed with sudo ...