414789 matches found
PT-2026-115095
Name of the Vulnerable Software and Affected Versions ELADMIN versions prior to 2.7 Description Cross Site Scripting XSS occurs via the WebSocketServer component, SpringSecurityConfig, and deploy.vue. XSS is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other...
PT-2026-114979
Name of the Vulnerable Software and Affected Versions kin-openapi versions prior to 0.145.0 Description Loading an attacker-controlled OpenAPI document through LoadFromData, LoadFromFile, or LoadFromURI can cause the loading process to panic. This occurs because the openapi3.Loader can dereferenc...
PT-2026-114978
Name of the Vulnerable Software and Affected Versions kin-openapi versions prior to 0.145.0 Description An unauthenticated remote client can trigger a denial of service by sending an unsupported or non-canonical HTTP method such as PROPFIND or lowercase get to an existing static path. The...
PT-2026-115332
A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error...
PT-2026-115284
JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as unsalted SHA-1 digests via tools.SHA1 in services/accountservice.go. Attackers who obtain the accounts table through database access or backups can crack console passwords using...
PT-2026-115215
An authorization flaw in Idira Conjur version 13.9.0 allows an authenticated user with limited privileges to perform unauthorized actions on a policy branch. Under specific circumstances, an attacker could potentially leverage this to retrieve unauthorized secrets, alter administrative access...
PT-2026-114995
: Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic. This issue affects Unitronics UniStream Pro/UniLogic: Unitronics UniStream Pro versions only B10 / C10 – UniLogic versions prior to 1.41.329...
PT-2026-114784
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4...
PT-2026-115333
A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local authenticated user to execute arbitrary code with elevated privileges...
PT-2026-115013
A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments. The issue occurs when the library processes an unsanitized deployment name. Due to a missing containment check, an attacker...
PT-2026-115156
Name of the Vulnerable Software and Affected Versions ValleyBell libvgm versions prior to commit a6eed945 Description The PCM data-block decompressor contains a heap out-of-bounds read issue caused by an unbounded compression-table index. An attacker can provide a specially crafted .vgm file...
PT-2026-114783
CERT/CC disclosed three DataElement Bisheng vulnerabilities CVE-2026-96679, CVE-2026-96681, CVE-2026-100156 allowing unauthenticated admin takeover. Bisheng CVE202696679 CVE202696681 CVE2026100156 CERTCC LLMSecurity Cybersecurity https://t.co/ZrY7qNDOvz...
PT-2026-114812
A cross-site scripting XSS vulnerability has been reported to affect Network & Virtual Switch. If a remote attacker gains an administrator account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: Network & Virtual...
PT-2026-114954
EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated user with Import scope access can send POST /api/v1/Import/id/exportErrors with another user's import identifier and retrieve an attachment identifier for a CSV containing rows from that impor...
PT-2026-115198
Netgate pfSense CE 2.7.1 through 2.9.0 contains a reflected cross-site scripting vulnerability in firewall rules.php that allows remote attackers to inject script via the unencoded if parameter. When the non-default Require Firewall Interface option is enabled, attackers can lure users with...
PT-2026-114801
The Rede Itaú for WooCommerce WordPress plugin before 5.5.3 does not verify the authenticity of a payment gateway webhook before updating an order's status, allowing unauthenticated attackers to change the status of arbitrary WooCommerce orders, including marking unpaid orders as paid and...
PT-2026-114935
In Progress® Kendo® UI for jQuery, in v2026.3.811 and earlier, the Scheduler Day, Timeline, Month, and Agenda views insert resource color values into quoted event wrapper attributes without proper encoding. An attacker who can control a resource color can inject additional HTML attributes,...
PT-2026-114944
In Progress® Kendo® UI for jQuery prior to version 2026.3.1015, the Calendar and MultiViewCalendar month content templates render data.url and data.title without proper URL sanitization and HTML attribute encoding. An attacker with low privileges who can control the URL option or culture-derived...
PT-2026-115027
Lychee is a free, open-source photo-management tool. Prior to 7.7.0, GET /docs/api exposes the Scramble-generated OpenAPI documentation configured by config/scramble.php to unauthenticated callers after installation, with observed response size and latency suggesting that the schema is regenerate...
PT-2026-114905
A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution...
PT-2026-114967
A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash...
PT-2026-115254
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an authorized attacker to execute code over a network...
PT-2026-114764
A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read...
PT-2026-122780
Security vulnerability affects the langfuse package. Next...
PT-2026-122855
Security vulnerability affects the langfuse package. Axios is a promise-based HTTP client for the browser and Node...
PT-2026-122719
Security vulnerability affects the strimzi-kafka-operator package. A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e...
PT-2026-122794
Security vulnerability affects the langfuse package. Axios is a promise-based HTTP client for the browser and Node...
PT-2026-115111
Name of the Vulnerable Software and Affected Versions Junrar versions prior to 7.6.1 Description An issue exists in the RAR virtual machine where a crafted RAR4 archive can force the extraction thread into a deterministic infinite CPU loop. This occurs because the RarVM.ExecuteCode function in...
PT-2026-122871
Security vulnerability affects the langfuse package. Axios is a promise-based HTTP client for the browser and Node...
PT-2026-115008
🚨 CVE-2026-97712 Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold. This can give the user more access than intended, up to full administrative access. 🎖@cveNotify...
PT-2026-122697
Security vulnerability affects the kafka package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...
PT-2026-115326
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability...
PT-2026-114925
Incorrect Privilege Assignment vulnerability in Shabti Kaplan Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin by DynamiApps: from n/a through 3.29.13...
PT-2026-115268
NivoCart through 2.5.1 contains a missing authorization vulnerability in the download action of account/order that allows unauthenticated attackers to retrieve guest order invoices by supplying an order id. Attackers can iterate the order id parameter, which matches guest orders stored with...
PT-2026-115262
Name of the Vulnerable Software and Affected Versions libmodplug versions 0.8.9.1 and earlier Description A heap-based out-of-bounds write exists in the ReadDSM function within src/load dsm.cpp. The issue occurs because the nPat variable is not validated against MAX PATTERNS. A remote attacker ca...
PT-2026-114949
P4 Search formerly Helix Search returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Server, allowing privilege escalation. This affects 2026.4.2 and earlier and is fixed in 2026.4.3...
PT-2026-114892
A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow...
PT-2026-115093
Name of the Vulnerable Software and Affected Versions react/http versions 1.0.0 through 1.11.0 Description ReactHttpBrowser fails to enforce a size limit on the internal buffer used to store response-header bytes. When the handleData function in ClientRequestStream receives data, it appends...
PT-2026-115265
Name of the Vulnerable Software and Affected Versions unarr version 1.1.1 Description An off-by-one heap-based buffer overflow occurs in the tar get name function within tar/parse-tar.c, which is accessible via the ar entry get name API. A remote attacker can provide a specially crafted TAR archi...
PT-2026-115010
Name of the Vulnerable Software and Affected Versions kin-openapi versions prior to 0.149.0 Description Runtime request, response, and direct schema validation lack cycle detection when an allOf, anyOf, or oneOf chain refers back to an ancestor schema. While loading and document validation accept...
PT-2026-114962
Name of the Vulnerable Software and Affected Versions EspoCRM versions prior to 9.3.9 Description An unauthenticated remote attacker can send an email to a monitored group or IMAP address, such as an email-to-Case address, containing arbitrary HTML within the plain-text body. The application stor...
PT-2026-114952
Name of the Vulnerable Software and Affected Versions symfony/yaml versions 5.4.0 through 5.4.53 symfony/yaml versions 6.0.0-BETA1 through 6.4.44 symfony/yaml versions 7.0.0-BETA1 through 7.4.17 symfony/yaml versions 8.0.0-BETA1 through 8.1.5 Description The YamlParser::lexInlineStructure functio...
PT-2026-114870
Name of the Vulnerable Software and Affected Versions jetty-security affected versions not specified jetty-eeN-security affected versions not specified Description Security constraints within the software are not combined correctly according to the Jakarta Servlet Spec when two or more constraint...
PT-2026-114917
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the IPv4 implementation of the Linux kernel. The function tcp v4 syn recv sock transfers ownership of ireq-ireq opt to a child socket without copying it...
PT-2026-115075
Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Removing Important Client Functionality.This issue affects Booking and Rental Manager: from n/a through 2.8.0...
PT-2026-122761
Security vulnerability affects the temporal-server-fips package. Echo is a Go web framework...
PT-2026-122961
A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a ".." basename that sftp uses as the local destination, writing outside the directory the user selected...
PT-2026-115131
Name of the Vulnerable Software and Affected Versions CFITSIO versions prior to 4.7.1 Description A heap-based out-of-bounds read exists in the HCOMPRESS tile decoder. An attacker can provide a specially crafted FITS file with ZCMPTYPE set to HCOMPRESS 1 and oversized tile geometry to read past t...
PT-2026-122833
Security vulnerability affects the external-dns package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...