Aggregator

A vulnerability, which was classified as problematic, has been found in 7-zip up to 16.02 on Windows. This vulnerability affects unknown code of the component DLL Loader. This manipulation causes untrusted search path. The identification of this vulnerability is CVE-2016-7804. The attack can only be executed locally. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability identified as critical has been detected in NVIDIA GeForce Experience and Windows GPU Display Driver. Affected is an unknown function of the component Local Service Provider. This manipulation causes untrusted search path. This vulnerability is handled as CVE-2019-5695. It is possible to launch the attack on the local host. There is not any exploit available. You should upgrade the affected component.

A vulnerability classified as critical has been found in NVIDIA GeForce Experience up to 3.20.1. This vulnerability affects unknown code of the component GameStream. This manipulation as part of Stream causes untrusted search path. This vulnerability is handled as CVE-2019-5701. It is possible to launch the attack on the local host. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability, which was classified as problematic, has been found in mutt up to 2.3.1. The affected element is the function hash_passwd of the component IMAP. This manipulation causes off-by-one. The identification of this vulnerability is CVE-2026-43860. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as problematic was found in mutt up to 2.3.1. Impacted is the function auth_cram. The manipulation results in improper neutralization of null byte or nul character. This vulnerability was named CVE-2026-43859. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in mutt up to 2.3.1. This issue affects the function show_sig_summary. The manipulation leads to null pointer dereference. This vulnerability is uniquely identified as CVE-2026-43864. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in mutt up to 2.3.1. This vulnerability affects the function data_object_to_stream of the file crypt-gpgme.c. Executing a manipulation can lead to incorrect check of function return value. This vulnerability is handled as CVE-2026-43863. The attack can be executed remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability marked as problematic has been reported in mutt up to 2.3.1. This affects the function imap_auth_gss. Performing a manipulation results in type confusion. This vulnerability is known as CVE-2026-43862. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in mutt up to 2.3.1. Affected by this issue is the function url_pct_decode. Such manipulation leads to improper neutralization of null byte or nul character. This vulnerability is traded as CVE-2026-43861. The attack may be launched remotely. There is no exploit available. The affected component should be upgraded.

Currently trending CVE - Hype Score: 1 - cPanel and WHM versions after 11.40 contain an authentication bypass vulnerability in the login flow that allows unauthenticated remote attackers to gain unauthorized access to the control panel.

Currently trending CVE - Hype Score: 1 - An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a crafted packet to the MTU length field

Currently trending CVE - Hype Score: 1 - An issue in Eprosima Micro-XREC-DDS Agent v.3.0.1 allows a remote attacker to cause a denial of service via a packet specially crafted to bear a non-valid value in any Boolean field.

Currently trending CVE - Hype Score: 1 - Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90. The `msg` parameter in the `/painel/gateways.php/error` endpoint does not properly sanitize user-supplied input, allowing attackers to inject arbitrary JavaScript into the HTML ...

Currently trending CVE - Hype Score: 1 - An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and PerformanceTest v11.1 Build 1004 allows attackers to access kernel memory and escalate privileges via a crafted IOCTL 0x8011E044 call.

Currently trending CVE - Hype Score: 1 - A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function, triggering remote command execution.

Россияне привыкают к VPN — а государство привыкает их выключать.

A vulnerability identified as problematic has been detected in MediaTek MT2718, MT6899, MT6985, MT6989, MT6991, MT8115, MT8186, MT8188, MT8196, MT8365, MT8367, MT8370, MT8371, MT8390, MT8391, MT8395, MT8676, MT8678, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788E, MT8791T, MT8792, MT8793, MT8796, MT8873, MT8883, MT8893 and MT8910. Affected by this vulnerability is an unknown functionality of the component slbc. This manipulation causes type confusion. This vulnerability appears as CVE-2026-20451. The attack requires local access. There is no available exploit. It is recommended to apply a patch to fix this issue.

A vulnerability categorized as problematic has been discovered in MediaTek MT6765, MT6768, MT6789, MT6877, MT6897, MT6899, MT6989, MT6991, MT6993, MT8367, MT8766, MT8768, MT8775, MT8781, MT8786, MT8788E, MT8791T, MT8792, MT8793, MT8796, MT8893 and MT8910. Affected is an unknown function of the component geniezone. The manipulation results in improper handling of insufficient permissions or privileges. This vulnerability is reported as CVE-2026-20448. The attack requires a local approach. No exploit exists. It is best practice to apply a patch to resolve this issue.

A vulnerability was found in MediaTek MT6768, MT6789, MT6877, MT6899, MT6989, MT6991, MT6993, MT8196, MT8367, MT8766, MT8768, MT8781, MT8786, MT8788E, MT8791T, MT8793 and MT8910. It has been rated as critical. This impacts an unknown function of the component geniezone. The manipulation leads to out-of-bounds read. This vulnerability is documented as CVE-2026-20447. The attack needs to be performed locally. There is not any exploit available. Applying a patch is the recommended action to fix this issue.

A vulnerability was found in WebPros Comet Backup up to 26.1.1/26.2.1. It has been declared as problematic. This affects an unknown function of the component API Call Handler. Executing a manipulation can lead to authorization bypass. This vulnerability is registered as CVE-2026-29200. It is possible to launch the attack remotely. No exploit is available. It is recommended to upgrade the affected component.