|
2121
|
5.3 |
MEDIUM
Network
|
-
|
-
|
An information disclosure vulnerability in dnsmasq allows remote attackers to bypass source checks via a crafted DNS packet with RFC 7871 client subnet information.
|
-
|
CVE-2026-4893
|
2026-05-12 23:15 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2122
|
- |
|
-
|
-
|
An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race condition in connection handling is successfully exploited, preventing le…
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2026-35227
|
2026-05-12 23:15 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2123
|
- |
|
-
|
-
|
A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without authentication on port 3088. An unau…
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2026-5029
|
2026-05-12 23:15 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2124
|
- |
|
-
|
-
|
ATutor is vulnerable to Reflected XSS in /install/upgrade.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's br…
|
CWE-79
Cross-site Scripting
|
CVE-2026-6909
|
2026-05-12 23:15 |
2026-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2125
|
- |
|
-
|
-
|
ATutor is vulnerable to Reflected XSS in /install/install.php endpoint. An attacker can provide a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's br…
|
CWE-79
Cross-site Scripting
|
CVE-2026-6956
|
2026-05-12 23:15 |
2026-05-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2126
|
9.8 |
CRITICAL
Network
|
cross-crypto
|
cross-implementation
|
CROSS implementation contains reference and optimized implementations of the CROSS post-quantum signature algorithm. Prior to commit fc6b7e7, there is a buffer overflow in crypto_sign_open() caused b…
|
CWE-121
CWE-122
Stack-based Buffer Overflow
Heap-based Buffer Overflow
|
CVE-2026-41509
|
2026-05-12 23:15 |
2026-05-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2127
|
8.1 |
HIGH
Network
|
-
|
-
|
An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain conditions, the driver could load and execute arbitrary classes when processing JDBC connection URL parameters. A…
|
CWE-470
Unsafe Reflection
|
CVE-2026-8178
|
2026-05-12 23:13 |
2026-05-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2128
|
- |
|
-
|
-
|
An authorization issue was addressed with improved state management. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.
|
-
|
CVE-2026-20696
|
2026-05-12 23:13 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2129
|
- |
|
-
|
-
|
A race condition was addressed with additional validation. This issue is fixed in macOS Tahoe 26.4. An app may be able to access sensitive user data.
|
-
|
CVE-2026-28830
|
2026-05-12 23:13 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2130
|
6.7 |
MEDIUM
Local
|
-
|
-
|
ACAP applications can gain elevated privileges due to improper input validation during the installation process, potentially leading to privilege escalation. This vulnerability can only be exploited …
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2026-0541
|
2026-05-12 23:13 |
2026-05-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
