Aggregator

A vulnerability labeled as critical has been found in Sonatype Nexus Repository Manager up to 3.30.0. This issue affects some unknown processing. Executing a manipulation can lead to improper access controls. This vulnerability appears as CVE-2021-29158. The attacker needs to be present on the local network. There is no available exploit.

A vulnerability described as problematic has been identified in Sonatype Nexus Repository up to 3.33.1-01. Impacted is an unknown function of the component HTTP Request Handler. Executing a manipulation can lead to injection. This vulnerability is registered as CVE-2021-40143. It is possible to launch the attack remotely. No exploit is available.

A vulnerability described as critical has been identified in Aruba ArubaOS 8.10.0.11/8.11.2.2/10.4.1.1/10.5.1.1. This issue affects some unknown processing of the component Access Point Management Protocol Handler. Executing a manipulation can lead to buffer overflow. This vulnerability is registered as CVE-2024-26305. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability identified as critical has been detected in RTI Connext Professional up to 6.1.2.16/7.3.0.1. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in buffer overflow. This vulnerability is known as CVE-2024-52059. Attacking locally is a requirement. No exploit is available. You should upgrade the affected component.

A vulnerability classified as critical was found in HPE AOS-CX. This affects an unknown part of the component Firewall. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2024-54010. Access to the local network is required for this attack to succeed. There is no exploit available.

A vulnerability was found in Gardener up to 1.142.5/1.143.2/1.144.1/1.144.99. It has been classified as problematic. Impacted is the function mustCheckProjectMembers of the component customverbauthorizer. This manipulation causes improper authorization. This vulnerability is handled as CVE-2026-79767. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in ludocode MPack 1.1.1 and classified as critical. This issue affects the function mpack_node_cstr_alloc/mpack_node_utf8_cstr_alloc. The manipulation results in integer overflow. This vulnerability is known as CVE-2026-88350. It is possible to launch the attack remotely. No exploit is available.

A vulnerability has been found in lwIP up to 2.2.1 and classified as very critical. This vulnerability affects unknown code of the component MQTT. The manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2026-87121. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in yaml-cpp 0.9.0. This affects the function Scanner::PopIndent of the file src/scanner.cpp of the component Scanner. Executing a manipulation can lead to information disclosure. This vulnerability appears as CVE-2026-75432. The attack may be performed from remote. There is no available exploit.

A vulnerability, which was classified as problematic, has been found in Joniles Mpxj up to 16.4.0. Affected by this issue is the function MerlinReader of the component Xml Parser. Performing a manipulation of the argument ZTIMEINTERVALS results in information disclosure. This vulnerability is reported as CVE-2026-61570. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in dvidelabs flatcc. Affected by this vulnerability is the function lex of the component Lexer. Such manipulation leads to out-of-bounds read. This vulnerability is documented as CVE-2026-88344. The attack can be executed remotely. There is not any exploit available.

A vulnerability classified as problematic has been found in Dvidelabs Flatcc. Affected is the function lex of the component Schema Lexer. This manipulation causes out-of-bounds read. This vulnerability is registered as CVE-2026-88345. Remote exploitation of the attack is possible. No exploit is available. To fix this issue, it is recommended to deploy a patch.

A vulnerability described as problematic has been identified in VirusTotal YARA 4.5.8. This impacts the function yr_arena_get_ptr of the component Arena. The manipulation of the argument num_buffers results in reachable assertion. This vulnerability is cataloged as CVE-2026-88341. The attack may be launched remotely. There is no exploit available.

A vulnerability marked as critical has been reported in VirusTotal YARA 4.5.8. This affects the function yr_rules_destroy of the component Deserialization. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2026-88340. The attack may be initiated remotely. There is no available exploit.

A vulnerability labeled as problematic has been found in emiago Sipgo up to 1.4.2. The impacted element is the function WSConnection.Read of the file sip/transport_ws.go of the component Transport. Executing a manipulation can lead to allocation of resources. This vulnerability is tracked as CVE-2026-77322. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in Nautobot up to 2.4.36/3.1.7. The affected element is an unknown function of the file render_field.html of the component Form Field Rendering. Performing a manipulation results in cross site scripting. This vulnerability is identified as CVE-2026-83801. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability categorized as problematic has been discovered in Joniles Mpxj up to 16.4.x. Impacted is an unknown function of the component File Handler. Such manipulation leads to path traversal. This vulnerability is referenced as CVE-2026-65829. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability was found in emiago sipgo up to 1.4.0. It has been rated as problematic. This issue affects the function ParserStream.parseSingle of the file sip/parser_stream.go of the component Parser. This manipulation causes denial of service. The identification of this vulnerability is CVE-2026-58268. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

A vulnerability was found in Nautobot up to 3.1.7. It has been declared as critical. This vulnerability affects unknown code of the component ApprovalWorkflowStageResponse Create Endpoint. The manipulation results in permission issues. This vulnerability was named CVE-2026-83805. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.