CVE-2026-86518 (v3: 6.3) 8 Sept 2026

A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file /edit.php. The manipulation o... Read more ➔

CVE-2026-86517 (v3: 6.3) 8 Sept 2026

A flaw has been found in itsourcecode Sales and Inventory System 1.0. The impacted element is the function mysqli_query of the file /pages/us_searchfr... Read more ➔

CVE-2026-86516 (v3: 4.7) 8 Sept 2026

A vulnerability was detected in elenavanengelenmaslova mocknest-serverless 0.9.0. The affected element is an unknown function of the file deployment/a... Read more ➔

CVE-2026-86515 (v3: 4.3) 8 Sept 2026

A security vulnerability has been detected in vgmstream up to r2117. Impacted is the function add_entry of the file src/meta/txtp_parser.c of the comp... Read more ➔

CVE-2026-86514 (v3: 6.3) 8 Sept 2026

A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp... Read more ➔

CVE-2026-86513 (v3: 5.3) 8 Sept 2026

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of t... Read more ➔

CVE-2026-86512 (v3: 6.3) 8 Sept 2026

A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file... Read more ➔

CVE-2026-86511 (v3: 5.3) 8 Sept 2026

A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the fil... Read more ➔

CVE-2026-75811 8 Sept 2026

Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings a... Read more ➔

CVE-2026-75810 8 Sept 2026

Exposed Dangerous Method or Function in ASUS Armoury Crate allow a local user to cause a brief system stall by bypassing driver authentication and sen... Read more ➔

CVE-2026-75809 8 Sept 2026

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality... Read more ➔

CVE-2026-75808 8 Sept 2026

Allocation of Resources Without Limits or Throttling in ASUS Armoury Crate allows a local user to cause a denial-of-service condition through system m... Read more ➔

CVE-2026-19397 8 Sept 2026

Missing authentication for a critical function in ASUS Control Center Express Agent allows an unauthenticated nearby user to control the host via a di... Read more ➔

CVE-2026-18023 8 Sept 2026

Sensitive Information in Resource Not Removed Before Reuse in ASUS Armoury Crate driver allows a local user to disclose sensitive information from uni... Read more ➔

CVE-2026-16006 8 Sept 2026

Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addres... Read more ➔

CVE-2026-16005 8 Sept 2026

Release of Invalid Pointer or Reference in Armoury Crate driver allows a local user to free arbitrary memory via a crafted IOCTL request by bypassing... Read more ➔

CVE-2026-16004 8 Sept 2026

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space vi... Read more ➔

CVE-2026-16003 8 Sept 2026

Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whit... Read more ➔

CVE-2026-12962 8 Sept 2026

A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincin... Read more ➔

CVE-2026-86510 (v3: 9.9) 8 Sept 2026

A vulnerability has been found in D-Link DIR-822A A_101. Affected is the function tunnel_set_params of the component L2TP Control Message Parser. Such... Read more ➔

CVE-2026-86509 (v3: 9.6) 8 Sept 2026

A flaw has been found in D-Link DIR-895L A1_102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component ud... Read more ➔

CVE-2026-82710 8 Sept 2026

Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usage_rules allows a malicious package publisher to inject... Read more ➔

CVE-2026-76977 (v3: 4.3) 8 Sept 2026

SAP UI5 does not sufficiently validate the parent frame's origin against the configured allowlist. An unauthenticated attacker could host a malicious... Read more ➔

CVE-2026-76971 (v3: 6.5) 8 Sept 2026

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to ini... Read more ➔

CVE-2026-76969 (v3: 9.4) 8 Sept 2026

@sap/cds-mtxs NPM library does not perform sufficient checks on certain functionality used in multitenant CAP applications with extensibility enabled.... Read more ➔