An authorization vulnerability in the country or region configuration interface of TP-Link RE305 V3 allows an unauthenticated attacker on the same local network to modify the wireless regulatory region settings. Exploitation can cause wireless connection interruptions, unavailable channels, client disconnections, and instability by forcing the device to apply parameters intended for a different regulatory region.
Substance3D Painter contains an out-of-bounds read vulnerability that may allow an attacker to disclose sensitive memory information. Exploitation requires user interaction, specifically opening a malicious file. The vulnerability has a medium severity rating with a CVSS score of 5.5.
A vulnerability in the Knative pkg common packages allows an attacker to send an oversized POST request to an admission webhook, causing excessive memory consumption and potential out-of-memory (OOM) termination of the controller pod. This affects all downstream consumers using the shared webhook server, including Knative, Tekton, KEDA, Sigstore policy-controller, and Kpack. The issue is fixed in version 0.0.0-20260531000007-52dbd5ece63f.
Substance3D Painter contains a stack-based buffer overflow vulnerability that can lead to arbitrary code execution with the privileges of the current user. Exploitation requires user interaction, specifically opening a crafted malicious file. The vulnerability has a high severity score of 7.8 and impacts confidentiality, integrity, and availability.
Adobe Connect has a code injection vulnerability (CWE-94) that allows an attacker to execute arbitrary code in the context of the current user. Exploitation requires user interaction, such as visiting a malicious URL or interacting with a compromised web page. The vulnerability affects the scope of the application and has a critical severity rating with a CVSS score of 9.6.
A SQL injection vulnerability exists in the admin/customer_search.php file of the oretnom23 php-travel-agency-system. The flaw allows remote attackers to manipulate the customer_name, voucher_no, or emp_name parameters to execute unauthorized SQL commands. The vulnerability has a high severity score of 7.3 and has been publicly disclosed. No patch or vendor response is currently available.
A SQL injection vulnerability exists in the oretnom23 php-travel-agency-system within the admin/customer_detail.php file. The flaw arises from improper handling of parameters such as costomer_id, ticket_id, emp_id, salary_id, and page_id, allowing remote attackers to manipulate SQL queries. Public exploit code is available, but no official response or patch has been issued by the project.
A high-severity vulnerability exists in oretnom23 php-travel-agency-system in the admin/employee_insert.php file. It allows remote attackers to perform unrestricted file uploads by manipulating the employee photo argument. The vulnerability has a CVSS score of 7.3 and an exploit has been publicly disclosed. The project has been informed but has not yet responded or issued a fix.
EPICS Base versions 7.0.10 and earlier contain a vulnerability due to insufficient validation of element or length values in network messages. This flaw can cause the application to read beyond the bounds of an allocated buffer, potentially leading to denial of service and exposure of adjacent memory contents.
EPICS Base versions 7.0.10 and earlier contain a vulnerability due to insufficient validation of element or length values in network messages. This flaw can cause the application to read beyond allocated buffer boundaries, potentially leading to denial of service and exposure of adjacent memory contents.
EPICS Base versions 7.0.10 and earlier contain a vulnerability due to improper validation of message length values during protocol parsing. This flaw can cause an integer overflow leading to an out-of-bounds memory write. Exploiting this vulnerability may result in process instability or denial of service conditions.
GFI KerioConnect versions before 10.0.8 Patch 2 contain a stored cross-site scripting (XSS) vulnerability in the Webmail component. This flaw allows remote attackers to execute JavaScript in an authenticated user's Webmail session by uploading a crafted SVG email attachment that bypasses sanitization. Exploitation leverages the temporary-download endpoint's weak Content-Security-Policy sandbox, enabling script execution upon opening the attachment. This can lead to theft of user credentials and mailbox contents. Proofpoint Threat Research has observed active exploitation in the wild targeting credential and mailbox theft.
EPICS Base versions 7.0.10 and earlier contain an integer overflow vulnerability in network request processing. This flaw can lead to incorrect memory allocation sizes, potentially causing memory corruption, denial of service, or remote code execution if exploited.
A vulnerability in Autodesk Fusion desktop application allows a maliciously crafted dynamic library loaded via the TextCommands.LoadDll command to execute arbitrary code. This occurs due to an exposed dangerous function that can be triggered when loading a DLL from an arbitrary path. The vulnerability has a high severity rating with a CVSS score of 7.8.
CVE-2026-109090 is a heap overflow vulnerability in libXi versions before 1.8.4. It occurs when a malicious X server sends an excessively large DEVICE_ENABLE reply, which is improperly handled by libXi. This flaw can lead to high impact on confidentiality, integrity, and availability.
A buffer overflow vulnerability exists in libXi before version 1.8.4 when handling DEVICE_RESOLUTION. This flaw could cause a heap overflow triggered by a malicious X server, potentially leading to high impact on confidentiality, integrity, and availability.
Private keys for eight eMudhra intermediate CA certificates have been compromised, affecting the trust of certificates used by HCL Notes Client for outbound network requests. This vulnerability allows an unauthenticated network attacker to spoof server certificates and perform man-in-the-middle (MITM) attacks, potentially intercepting or modifying outbound TLS traffic.
CVE-2026-108142 is a critical vulnerability in the CDP Coordinator Service that allows an unauthenticated attacker to bypass authorization controls. This flaw enables unauthorized access without requiring user interaction or privileges.
This vulnerability allows an authenticated user with the Restore Operator role, who can control the contents of a backed-up NAS share, to perform relative path traversal and write attacker-controlled files to arbitrary paths on the backup server. The flaw requires high privileges and user interaction is not needed. The vulnerability has a medium severity rating with a CVSS score of 5.9. No affected versions or patches are specified in the available data.
A vulnerability in libXtst versions before 1.2.6 allows a malicious X server to send malformed RECORD EnableContext replies that cause an X client using the parse_reply_call_callback function to enter an endless loop. This results in a denial of service condition due to resource exhaustion.