|
6301
|
7.5 |
HIGH
Network
|
mattermost
|
mattermost_server
|
Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to properly validate msgpack-encoded WebSocket frames before memory allocation which allows an unaut…
|
CWE-789
Memory Allocation with Excessive Size Value
|
CVE-2026-5740
|
2026-05-23 01:53 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6302
|
6.5 |
MEDIUM
Network
|
mattermost
|
mattermost_server
|
Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.2, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to validate the TIFF IFD offset in the image header before allocating memory, whic…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2026-5755
|
2026-05-23 01:52 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6303
|
8.8 |
HIGH
Adjacent
|
connectwise
|
automate
|
The ConnectWise Automate™ Agent does not fully verify the authenticity of components obtained during plugin loading and self-update operations. This issue is addressed in Automate 2026.5.
|
CWE-494
Download of Code Without Integrity Check
|
CVE-2026-9089
|
2026-05-23 01:49 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6304
|
- |
-
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
net: qrtr: ns: Limit the maximum server registration per node
Current code does no bound checking on the number of servers added …
|
-
|
CVE-2026-43491
|
2026-05-23 01:33 |
2026-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6305
|
- |
-
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
lib/crypto: mpi: Fix integer underflow in mpi_read_raw_from_sgl()
Yiming reports an integer underflow in mpi_read_raw_from_sgl() …
|
-
|
CVE-2026-43492
|
2026-05-23 01:33 |
2026-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6306
|
9.8 |
CRITICAL
Network
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
crypto: pcrypt - Fix handling of MAY_BACKLOG requests
MAY_BACKLOG requests can return EBUSY. Handle them by checking
for that va…
|
-
|
CVE-2026-43493
|
2026-05-23 01:33 |
2026-05-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6307
|
- |
-
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
accel/ivpu: Disallow re-exporting imported GEM objects
Prevent re-exporting of imported GEM buffers by adding a custom
prime_hand…
|
-
|
CVE-2026-43498
|
2026-05-23 01:33 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6308
|
- |
-
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
net: wwan: t7xx: validate port_count against message length in t7xx_port_enum_msg_handler
t7xx_port_enum_msg_handler() uses the m…
|
-
|
CVE-2026-43495
|
2026-05-23 01:33 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6309
|
- |
-
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
net/sched: sch_red: Replace direct dequeue call with peek and qdisc_dequeue_peeked
When red qdisc has children (eg qfq qdisc) who…
|
-
|
CVE-2026-43496
|
2026-05-23 01:33 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6310
|
- |
-
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
fbdev: udlfb: add vm_ops to dlfb_ops_mmap to prevent use-after-free
dlfb_ops_mmap() uses remap_pfn_range() to map vmalloc framebu…
|
-
|
CVE-2026-43497
|
2026-05-23 01:33 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6311
|
- |
-
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
rtmutex: Use waiter::task instead of current in remove_waiter()
remove_waiter() is used by the slowlock paths, but it is also use…
|
-
|
CVE-2026-43499
|
2026-05-23 01:33 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6312
|
- |
-
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
ipv6: rpl: reserve mac_len headroom when recompressed SRH grows
ipv6_rpl_srh_rcv() decompresses an RFC 6554 Source Routing Header…
|
-
|
CVE-2026-43501
|
2026-05-23 01:33 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6313
|
- |
-
|
-
|
-
|
In the Linux kernel, the following vulnerability has been resolved:
net/rds: handle zerocopy send cleanup before the message is queued
A zerocopy send can fail after user pages have been pinned but…
|
-
|
CVE-2026-43502
|
2026-05-23 01:33 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6314
|
9.6 |
CRITICAL
Network
|
-
|
-
|
Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay).
This issue affects Avantra: before 25.3.1.
|
CWE-613
Insufficient Session Expiration
|
CVE-2026-8670
|
2026-05-23 01:32 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6315
|
7.5 |
HIGH
Adjacent
|
-
|
-
|
Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure.
This issue affects Avantra: before 25.3.0.
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2026-8671
|
2026-05-23 01:32 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6316
|
5.1 |
MEDIUM
Local
|
-
|
-
|
Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords.
This issue affects Avantra: before 25.3.0.
|
CWE-1393
Use of Default Password
|
CVE-2026-8672
|
2026-05-23 01:32 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6317
|
5.9 |
MEDIUM
Network
|
-
|
-
|
Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks.
This issue affects Avantra: before 25.3.0.
|
CWE-523
Unprotected Transport of Credentials
|
CVE-2026-8673
|
2026-05-23 01:32 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6318
|
7.5 |
HIGH
Network
|
-
|
-
|
Directory traversal in Follett Software's Destiny Library Manager 22_0_2_rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the image parameter
|
CWE-22
Path Traversal
|
CVE-2025-45145
|
2026-05-23 01:32 |
2026-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6319
|
- |
-
|
-
|
-
|
Simple Hierarchical Select (SHS) for Drupal 7 contains cross-site scripting risk due to improper output escaping of term-derived text. Confirmed affected paths include field formatter output (shs_fie…
|
CWE-79
Cross-site Scripting
|
CVE-2026-4929
|
2026-05-23 01:17 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6320
|
- |
-
|
-
|
-
|
In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter rendering pipeline.
Vector A (token display templates): When the Token module is enabled and token di…
|
CWE-79
Cross-site Scripting
|
CVE-2026-4093
|
2026-05-23 01:17 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6321
|
6.7 |
MEDIUM
Local
|
-
|
-
|
Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager. A sys-admin user may exploit this vulnerability, leading to the disclosure of certain user c…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2021-21508
|
2026-05-23 01:17 |
2026-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6322
|
- |
-
|
-
|
-
|
vifm is vulnerable to a heap buffer overflow during the history merge process when saving the state file (vifminfo.json). This flaw occurs because the application lacks a runtime check on the length …
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2026-8997
|
2026-05-23 01:16 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6323
|
7.5 |
HIGH
Network
|
-
|
-
|
Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand.
Secrets were generated using Perl's built-in rand function, which is predictable and unsuitable for security usage.
|
CWE-331
Insufficient Entropy
|
CVE-2026-46473
|
2026-05-23 01:14 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6324
|
9.8 |
CRITICAL
Network
|
-
|
-
|
The BookingPress Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'bookingpress_validate_submitted_booking_form_func' function in all versio…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2026-6960
|
2026-05-23 00:50 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6325
|
7.8 |
HIGH
Local
|
trendmicro
|
apex_one
|
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different…
|
CWE-346
Origin Validation Error
|
CVE-2026-45206
|
2026-05-23 00:49 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6326
|
7.8 |
HIGH
Local
|
trendmicro
|
apex_one
|
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different…
|
CWE-346
Origin Validation Error
|
CVE-2026-45207
|
2026-05-23 00:48 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6327
|
7.8 |
HIGH
Local
|
trendmicro
|
apex_one
|
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the abil…
|
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
|
CVE-2026-45208
|
2026-05-23 00:48 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6328
|
9.8 |
CRITICAL
Network
|
trendmicro
|
apex_one
|
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations.
Please note: although this vul…
|
CWE-22
Path Traversal
|
CVE-2025-71210
|
2026-05-23 00:15 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6329
|
9.8 |
CRITICAL
Network
|
trendmicro
|
apex_one
|
A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations. This vulnerability is similar in …
|
CWE-22
Path Traversal
|
CVE-2025-71211
|
2026-05-23 00:13 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6330
|
7.8 |
HIGH
Local
|
trendmicro
|
apex_one
|
A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the…
|
CWE-59
Link Following
|
CVE-2025-71212
|
2026-05-23 00:08 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6331
|
7.8 |
HIGH
Local
|
trendmicro
|
apex_one
|
An origin validation error vulnerability in Trend Micro Apex One could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the abili…
|
CWE-346
Origin Validation Error
|
CVE-2025-71213
|
2026-05-23 00:05 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6332
|
7.5 |
HIGH
Network
|
honeywell
|
control_network_module_firmware
|
Honeywell Control
Network Module (CNM) contains
insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing
system files, potentially…
|
CWE-538
File and Directory Information Exposure
|
CVE-2026-5434
|
2026-05-22 23:38 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6333
|
9.1 |
CRITICAL
Network
|
honeywell
|
control_network_module_firmware
|
Honeywell Control
Network Module (CNM) contains command injection vulnerability
in the web interface. An attacker could exploit this vulnerability via command
delimiters, potentially resulting in Rem…
|
CWE-77
Command Injection
|
CVE-2026-5433
|
2026-05-22 23:38 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6334
|
8.1 |
HIGH
Network
|
nvidia
|
dgx_os
|
NVIDIA DGX OS contains a vulnerability in the factory provisioning process, where the cloning of a base image causes identical SSH host keys to be deployed across multiple systems. The sharing of cr…
|
CWE-321
Use of Hard-coded Cryptographic Key
|
CVE-2026-24218
|
2026-05-22 23:35 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6335
|
7.8 |
HIGH
Local
|
trendmicro
|
apex_one
|
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different…
|
CWE-346
Origin Validation Error
|
CVE-2026-34930
|
2026-05-22 22:39 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6336
|
7.8 |
HIGH
Local
|
trendmicro
|
apex_one
|
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different…
|
CWE-346
Origin Validation Error
|
CVE-2026-34929
|
2026-05-22 22:38 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6337
|
7.8 |
HIGH
Local
|
trendmicro
|
apex_one
|
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different…
|
CWE-346
Origin Validation Error
|
CVE-2026-34928
|
2026-05-22 22:37 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6338
|
7.8 |
HIGH
Local
|
trendmicro
|
apex_one
|
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations.
Please note: an attacker must first obtain the ability to …
|
CWE-346
Origin Validation Error
|
CVE-2026-34927
|
2026-05-22 22:31 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6339
|
6.7 |
MEDIUM
Local
|
trendmicro
|
apex_one
|
A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code to deploy to agents…
|
CWE-23
Relative Path Traversal
|
CVE-2026-34926
|
2026-05-22 21:47 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6340
|
9.8 |
CRITICAL
Network
|
apache
|
fory
|
Deserialization of untrusted data in Apache Fory PyFory. PyFory's ReduceSerializer could bypass documented DeserializationPolicy validation hooks during reduce-state restoration and global-name resol…
|
CWE-502
Deserialization of Untrusted Data
|
CVE-2026-48207
|
2026-05-22 21:40 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6341
|
- |
-
|
-
|
-
|
STER uses unencrypted TCP traffic to transmit data over the network. It allows an attacker to conduct a Man-In-The-Middle attack and obtain sensitive data such as passwords, personal data, or authen…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2026-25608
|
2026-05-22 19:16 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6342
|
- |
-
|
-
|
-
|
Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after analyzing how passwords with known values are encoded.
This issue was fixed in version…
|
CWE-261
Weak Encoding for Password
|
CVE-2026-25607
|
2026-05-22 19:16 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6343
|
- |
-
|
-
|
-
|
A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated …
|
CWE-89
SQL Injection
|
CVE-2026-25606
|
2026-05-22 19:16 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6344
|
7.5 |
HIGH
Network
|
-
|
-
|
The Ditty – Responsive News Tickers, Sliders, and Lists plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.1.65. This is due to the plugin not properly…
|
CWE-862
Missing Authorization
|
CVE-2026-9011
|
2026-05-22 18:16 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6345
|
4.3 |
MEDIUM
Network
|
-
|
-
|
The Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.1. This is due …
|
CWE-862
Missing Authorization
|
CVE-2026-8692
|
2026-05-22 18:16 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6346
|
5.3 |
MEDIUM
Network
|
-
|
-
|
The MotoPress Hotel Booking plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.0.1. This is due to the plugin not properly verifying that a user is aut…
|
CWE-862
Missing Authorization
|
CVE-2026-8684
|
2026-05-22 18:16 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6347
|
7.5 |
HIGH
Network
|
-
|
-
|
The AudioIgniter plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 2.0.2. This is due to the handle_playlist_endpoint() function (hooked to temp…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2026-8679
|
2026-05-22 18:16 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6348
|
5.4 |
MEDIUM
Network
|
-
|
-
|
A broken access
control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints do not
correctly enforce authorization checks, allowing an a…
|
CWE-862
Missing Authorization
|
CVE-2026-8381
|
2026-05-22 18:16 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6349
|
5.4 |
MEDIUM
Network
|
-
|
-
|
The FluentCRM – Email Newsletter, Automation, Email Marketing, Email Campaigns, Optins, Leads, and CRM Solution plugin for WordPress is vulnerable to Blind Server-Side Request Forgery in all versions…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2026-7798
|
2026-05-22 18:16 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
6350
|
4.3 |
MEDIUM
Network
|
-
|
-
|
The Slider by Soliloquy – Responsive Image Slider for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.8.1 via the map_meta_cap. …
|
CWE-200
Information Exposure
|
CVE-2026-7636
|
2026-05-22 18:16 |
2026-05-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
