CVE-2026-104031

A flaw exists in SSSD where the autofs responder service fails to release memory allocated during successful request processing until the client connection terminates. A local attacker can exploit this by maintaining an open connection and submitting repeated valid requests, resulting in memory e...

CVE-2024-88779

A critical pre-authentication memory corruption flaw exists in Citrix NetScaler ADC gateways. This vulnerability allows remote attackers to crash the affected enterprise gateways. No specific versions, root causes, or remediation steps are provided in the documents. Information regarding exploit ...

CVE-2026-95140

The software kkFileView versions v5.0.0 through v5.0.2 is vulnerable to a directory traversal vulnerability located in FileController.java . The fileUpload, createFolder, and existsFile endpoints accept a path parameter that is concatenated into the upload base path without sufficient validation....

CVE-2025-45871

LogicalDOC Enterprise, version 9.1.1 and below , is vulnerable to a blind SQL injection within the WorkflowsDataServlet component. This flaw allows an authenticated user to manipulate SQL queries by providing a crafted workflow template name . The impact involves unauthorized data access or manip...

CVE-2025-71384

The Dbit WIFI4 N300 1.0.0 devices are vulnerable to a stack-based buffer overflow in the /api/addStaticDHCP comment field. This flaw allows administrators connected to the local Wi-Fi network to achieve remote code execution by executing arbitrary OS commands. While a proof of concept is mentione...

CVE-2026-95248

TigerGraph Community Edition 4.2.4 is vulnerable to an arbitrary file write that can lead to remote code execution. The software ships with a default tigergraph/tigergraph credential pair that lacks forced rotation. An unauthenticated HTTP call can inject a GSQL query using a PRINT TO CSV command...

CVE-2026-77178

Oracle VM VirtualBox versions prior to 7.2.8 are vulnerable to an out-of-bounds write in the host OS. The flaw is located within the pcnetReceiveNoSync function in DevPCNet.cpp, specifically affecting the PCNet (Am79C970A) network device model. This allows guest OS users to trigger the write. No ...

CVE-2026-95253

The Opengear NGCS 25.11.8 console manager is vulnerable to Remote Code Execution (RCE) via an authenticated admin account. The issue exists in the POST /api/v2/pdus endpoint, which accepts JSON input without character filtering. This input is processed by commands/PDUs.lua and passed into io.pope...

CVE-2026-95252

The LCDS Laquis SCADA system is vulnerable to a pre-authentication attack (CVSS 9.8) via its web server, mili.exe , on TCP port 11234 . When no password is configured, the server performs no authentication check. An attacker can use POST /uploade.html to write files anywhere on the system due to ...

CVE-2026-95251

Accusoft / Apryse PrizmDoc for Java (VirtualViewer version 5.22.1 ) is vulnerable to an unauthenticated remote code execution (RCE) flaw. The vulnerability exists in the POST /virtualviewer/AjaxServlet?action=uploadDocument endpoint, which accepts file uploads without requiring cookies, authoriza...

CVE-2026-95250

The Ecava IntegraXor IGX 16.0.701.10 software is vulnerable to an unauthenticated Remote Code Execution (RCE) flaw. The dxweb service on port 8081 exposes a POST /FileUpload endpoint that lacks authentication and allows the user to control the copyTo destination. Subsequently, dxmanager reads JSO...

CVE-2026-95153

A vulnerability exists in Bludit CMS 3.22.0 that allows a remote attacker to obtain sensitive information . The issue is accessible via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints. No specific root cause, exploit details, or remediation steps are provided in the available docum...

CVE-2025-71383

The Dbit WIFI4 N300 1.0.0 devices are vulnerable to a crash of the management interface. This issue arises from an error in a JSON parser when processing a request from the local Wi-Fi network that lacks a username or password field for the /api/login endpoint. While a reference link is provided,...

CVE-2026-105786

The open source note-taking application Joplin is vulnerable to an unauthenticated account takeover in versions prior to 3.7.13 . The root cause lies in packages/server/src/models/ApplicationModel.ts, which accepts a caller-chosen application authorization identifier, and the public endpoint pack...

CVE-2026-105471

A SQL injection vulnerability exists in the Registration Handler component of the girishsaraf Online-Appointment-Booking-System (up to commit f427b4757128ca253d33d0cc4e87bbb9c999a4d5). The flaw is located in an unknown function within the signup.php file, where manipulating the fname argument all...

CVE-2026-82988

The ViewSonic ViewBoard smartboard, which uses an Android-based system, is vulnerable to an arbitrary file download in its vCast APK delivery mechanism . An unauthenticated remote attacker can trigger the installation of an unprivileged APK by serving a malicious URL through an unauthenticated do...

CVE-2026-82989

ViewSonic ViewBoard smartboards, which run on an Android-based system, are vulnerable to an input injection flaw in the vCast software suite. The vulnerability exists in exposed network services, allowing a remote, unauthenticated attacker to inject arbitrary input into service endpoints via HTTP...

CVE-2026-105785

Prior to Joplin Server 3.7.2 , a vulnerability exists in the TokenModel.ts and UserModel.ts components. The system stores CSRF, account-confirmation, email-change, and password-reset tokens without distinguishing their specific purposes. This allows an attacker to use a leaked CSRF or confirmatio...

CVE-2026-105784

The open-source note-taking application Joplin is vulnerable to CSS injection in versions prior to 3.7.13 . The root cause is the improper handling of jsoncanvas fences, where the TextNode.tsx and FileNode.tsx components render card content using the full Markdown renderer and insert the resultin...

CVE-2026-105783

The Joplin note-taking application (prior to version 3.7.13 ) is vulnerable to cross-origin theft of a permanent API token when the optional Web Clipper server is enabled. The root cause is located in packages/lib/ClipperServer.ts, where the server sends Access-Control-Allow-Origin: * and fails t...