CVE-2006-3559: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Arif Supriyanto auraCMS 1.62 allow remote attackers to execute arbitrary SQL commands and delete all shoutbox messages via the 1 name and 2 pesan parameters...

CVE-2006-2583: Undefined Security Weakness

PHP remote file inclusion vulnerability in nucleus/libs/PLUGINADMIN.php in Nucleus 3.22 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSDIRLIBS parameter...

CVE-2006-1844: Undefined Security Weakness

The Debian installer for the 1 shadow 4.0.14 and 2 base-config 2.53.10 packages includes sensitive information in world-readable log files, including preseeded passwords and pppoeconf passwords, which might allow local users to gain privileges...

CVE-2006-1482: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in ConfTool 1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter...

CVE-2006-0844: Undefined Security Weakness

Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which allows remote attackers to bypass login authentication, probably by setting the blogAdmin cookie...

CVE-2005-2619: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in kvarcve.dll in Autonomy formerly Verity KeyView SDK before 9.2.0, as used in Lotus Notes 6.5.4 and 7.0, allows remote attackers to delete arbitrary files via a 1 ZIP, 2 UUE or 3 TAR archive that contains a .. dot dot in the filename, which is not properly...

CVE-2006-0137: Undefined Security Weakness

SQL injection vulnerability in linkcategory.php in Phanatic Softwares Chimera Web Portal System 0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-0082: Use of Externally-Controlled Format String

Format string vulnerability in the SetImageInfo function in image.c for ImageMagick 6.2.3 and other versions, and GraphicsMagick, allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a numeric format string specifier such as %d in the file name...

CVE-2005-3819: Undefined Security Weakness

Multiple SQL injection vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary SQL commands and bypass authentication via the 1 username and 2 date parameter in the HelpDesk module...

CVE-2004-2482: Undefined Security Weakness

Microsoft Outlook 2000 and 2003, when configured to use Microsoft Word 2000 or 2003 as the e-mail editor and when forwarding e-mail, does not properly handle an opening OBJECT tag that does not have a closing OBJECT tag, which causes Outlook to automatically download the URI in the data property ...

CVE-2005-2611: Undefined Security Weakness

VERITAS Backup Exec for Windows Servers 8.6 through 10.0, Backup Exec for NetWare Servers 9.0 and 9.1, and NetBackup for NetWare Media Server Option 4.5 through 5.1 uses a static password during authentication from the NDMP agent to the server, which allows remote attackers to read and write...

CVE-2003-1165: Undefined Security Weakness

Buffer overflow in BRS WebWeaver 1.06 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP request with a long User-Agent header...

CVE-2004-2045: Undefined Security Weakness

The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of service device reboot via an HTTP request with a long username...

CVE-2005-1342: Undefined Security Weakness

The x-man-page: URI handler for Apple Terminal 1.4.4 in Mac OS X 10.3.9 does not cleanse terminal escape sequences, which allows remote attackers to execute arbitrary commands...

CVE-2000-1221: Undefined Security Weakness

The line printer daemon lpd in the lpr package in multiple Linux operating systems authenticates by comparing the reverse-resolved hostname of the local machine to the hostname of the print server as returned by gethostname, which allows remote attackers to bypass intended access controls by...

CVE-2002-1614: Undefined Security Weakness

Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at...

CVE-2004-1769: Undefined Security Weakness

The "Allow cPanel users to reset their password via email" feature in cPanel 9.1.0 build 34 and earlier, including 8.x, allows remote attackers to execute arbitrary code via the user parameter to resetpass...

CVE-2002-0990: Undefined Security Weakness

The web proxy component in Symantec Enterprise Firewall SEF 6.5.2 through 7.0, Raptor Firewall 6.5 and 6.5.3, VelociRaptor, and Symantec Gateway Security allow remote attackers to cause a denial of service connection resource exhaustion via multiple connection requests to domains whose DNS server...

CVE-2002-1463: Undefined Security Weakness

Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...

CVE-2003-0021: Undefined Security Weakness

The "screen dump" feature in Eterm 0.9.1 and earlier allows attackers to overwrite arbitrary files via a certain character escape sequence when it is echoed to a user's terminal, e.g. when the user views a file containing the malicious sequence...

CVE-2004-0735: Undefined Security Weakness

Buffer overflow in Medal of Honor 1 Allied Assault 1.11v9 and earlier, 2 Breakthrough 2.40b and earlier, and 3 Spearhead 2.15 and earlier, when playing on a Local Area Network LAN, allows remote attackers to execute arbitrary code via vectors such as 1 the getinfo query, 2 the connect packet, and...

CVE-2002-0068: Undefined Security Weakness

Squid 2.4 STABLE3 and earlier allows remote attackers to cause a denial of service core dump and possibly execute arbitrary code with an ftp:// URL with a larger number of special characters, which exceed the buffer when Squid URL-escapes the characters...

CVE-2003-0048: Undefined Security Weakness

PuTTY 0.53b and earlier does not clear logon credentials from memory, including plaintext passwords, which could allow attackers with access to memory to steal the SSH credentials...

CVE-2001-1142: Undefined Security Weakness

ArGoSoft FTP Server 1.2.2.2 uses weak encryption for user passwords, which allows an attacker with access to the password file to gain privileges...

CVE-2001-0473: Undefined Security Weakness

Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands...

CVE-1999-1183: Undefined Security Weakness

System Manager sysmgr GUI in SGI IRIX 6.4 and 6.3 allows remote attackers to execute commands by providing a trojan horse 1 runtask or 2 runexec descriptor file, which is used to execute a System Manager Task when the user's Mailcap entry supports the x-sgi-task or x-sgi-exec type...

CVE-1999-1113: Undefined Security Weakness

Buffer overflow in Eudora Internet Mail Server EIMS 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106...

CVE-2000-0145: Undefined Security Weakness

The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions...

CVE-1999-0226: Undefined Security Weakness

Windows NT TCP/IP processes fragmented IP packets improperly, causing a denial of service...

CVE-1999-0414: Undefined Security Weakness

In Linux before version 2.0.36, remote attackers can spoof a TCP connection and pass data to the application layer before fully establishing the connection...

CVE-2026-108447: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

Microsoft Office: CVE-2026-70281: Microsoft Office Outlook Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...

CVE-2026-103836: Out-of-bounds Write

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Microsoft Windows: CVE-2026-88191: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-96297: Use After Free

Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no longer in use. Because that memory ca...

Microsoft Windows: CVE-2026-88134: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-109758: Improperly Controlled Modification of Object Prototype Attributes

Perforce Helix Authentication Service HAS deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint is reachable by an attacker. In affected versions of HAS, the installation templates contain a default credential which the installe...

Microsoft .NET Framework: CVE-2026-108398: .NET Framework Security Feature Bypass Vulnerability

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...

CVE-2026-108575: Improper Authorization

A vulnerability has been found in BerriAI LiteLLM up to 1.94.0. This affects the function getsecret of the file secretmanagers/main.py of the component Secret Resolution. The manipulation of the argument apikey leads to improper authorization. The attack can be initiated remotely. The exploit has...

CVE-2026-107390: Memory Allocation with Excessive Size Value

music-metadata is a metadata parser for audio and video media files. Prior to 11.16.0, the MP4 parser accepts an attacker-controlled 64-bit extended atom size, converts it to a JavaScript Number, and uses the resulting payload length for atom-specific readToken calls before proving that the atom...

CVE-2026-107215: Memory Allocation with Excessive Size Value

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.3.1 to 2.11.0, extractPart allocates a byte slice directly from an attacker-controlled CFB directory-entry size before validating the sector chain or size domain. extractPart trusts the CFB directory...

CVE-2026-76463: Improper Access Control

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco networking engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-107167: Use After Free

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-76471: Heap-based Buffer Overflow

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute arbitrary code with root privileges or cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of data that is...

CVE-2026-95534: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Object Injection. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 2.0.19...

CVE-2026-106066: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, gmalloc sizing based on overflowing width height bytes-per-pixel can allocate far less memory than GEGL reads or writes during export, following integer overflow...

CVE-2026-76266: Improper Privilege Management

In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could cause an affected Linux package upgrade to run attacker-controlled operating-system commands with root privileges. The...

CVE-2026-98277: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: ring the doorbell if a burst ends in a drop fbnictxmap skips the doorbell write, and the completion request, for every packet handed to it with xmitmore set, counting on the packet which ends the burst to publish them...

CVE-2026-105861: Exposure of Sensitive Information to an Unauthorized Actor

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not verified as trusted, potentially exposing a valid session to ...

CVE-2026-104034: Expired Pointer Dereference

A flaw was found in SSSD. A use-after-free vulnerability exists in the Kerberos Credential Manager KCM responder during Kerberos ticket-granting ticket TGT renewal, where a deferred callback accesses memory that has already been released. An authenticated local user with a renewable Kerberos tick...