2026

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affe

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker t

Zohocorp ManageEngine ADSelfService Plus version before 6525, DataSecurity Plus before 6264 and RecoveryManager Plus bef

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent self-protection mechanism could allow a

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent cache mechanism could allow a local at

A time-of-check time-of-use vulnerability in the Trend Micro Apex One (mac) agent iCore service signature verification c

An origin validation error vulnerability in the Trend Micro Apex One (mac) agent iCore service could allow a local attac

An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileg

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code an

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code an

Authorization bypass through User-Controlled key vulnerability in PosCube Hardware Software and Consulting Ltd. QR Menu

Exposure of private personal information to an unauthorized actor, Insufficiently Protected Credentials vulnerability in

Request Tracker is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the "Page" parameter in GET re

The Divi Form Builder plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.2

(Externally Controlled Reference to a Resource in Another Sphere), (Authorization Bypass Through User-Controlled Key) vu

In the Linux kernel, the following vulnerability has been resolved: net/rds: handle zerocopy send cleanup before the me

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: reserve mac_len headroom when recompress

In the Linux kernel, the following vulnerability has been resolved: rtmutex: Use waiter::task instead of current in rem

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Disallow re-exporting imported GEM obje

In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: add vm_ops to dlfb_ops_mmap to preven

In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_red: Replace direct dequeue call wit

In the Linux kernel, the following vulnerability has been resolved: net: wwan: t7xx: validate port_count against messag

In the Linux kernel, the following vulnerability has been resolved: net/rds: reset op_nents when zerocopy page pin fail

The affected product may expose credentials remotely between low privileged visualization users during concurrent login

When bsdinstall or bsdconfig are prompted to scan for nearby Wi-Fi networks, they build up a list of network names and u

In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key

ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls. As a

When a fusefs file system implements extended attributes, the kernel may send a FUSE_LISTXATTR message to the userspace

A file descriptor can be closed while a thread is blocked in a poll(2) or select(2) call waiting for that descriptor. B

Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail

Concurrency and locking defects in GSS-TSIG

Insufficient Validation of Autoprimary SOA Queries

Insufficient Validation of Names During AXFR

Incorrect Behaviour of Views with TCP PROXY Requests

libcasper(3) communicates with helper processes via UNIX domain sockets, and uses the select(2) system call to wait for

A heap-based buffer overflow vulnerability exists in the LXF element parsing functionality of MediaInfoLib (version(s):

Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remo

A time-of-check time-of-use (TOCTOU) condition in the ad_flush function in Netatalk 3.0.0 through 4.4.2 involves root-pr

Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An atta

Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface. An attacker could

Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to check integration

The setcred(2) system call is only available to privileged users. However, before the privilege level of the caller is

A missing break statement in DSI OpenSession processing in Netatalk 1.5.0 through 4.4.2 causes a DSIOPT_ATTNQUANT switch

Netatalk 2.1.0 through 4.4.2 combines multiple errno values using bitwise OR, resulting in incorrect error codes when mu