|
201
|
- |
|
-
|
-
|
A vulnerability was identified in the ShadowAttribute proposal creation workflow. The add action accepted user-controlled ShadowAttribute request data without removing the id field before saving the …
New
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2026-9136
|
2026-05-22 01:04 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
202
|
- |
|
-
|
-
|
The CSP report endpoint intended to limit logged CSP reports to 1 KB but incorrectly allowed reports up to 1 MB before truncation. On deployments where the endpoint is reachable by untrusted clients,…
New
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2026-9137
|
2026-05-22 01:04 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
203
|
- |
|
-
|
-
|
The affected product may expose credentials remotely between low privileged visualization users during concurrent login operations due to insufficient isolation of authentication data. The vulnerabil…
New
|
CWE-522
Insufficiently Protected Credentials
|
CVE-2026-0393
|
2026-05-22 01:04 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
204
|
- |
|
-
|
-
|
Request Tracker is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the "Page" parameter in GET requests. An attacker can craft a URL that, when opened, results in arbitrary Jav…
New
|
CWE-79
Cross-site Scripting
|
CVE-2026-6841
|
2026-05-22 01:04 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
205
|
4.8 |
MEDIUM
Network
|
-
|
-
|
Incorrect Behaviour of Views with TCP PROXY Requests
New
|
CWE-284
Improper Access Control
|
CVE-2026-41999
|
2026-05-22 00:27 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
206
|
6.8 |
MEDIUM
Network
|
-
|
-
|
Insufficient Validation of Names During AXFR
New
|
CWE-77
Command Injection
|
CVE-2026-42000
|
2026-05-22 00:27 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
207
|
7.5 |
HIGH
Network
|
-
|
-
|
Insufficient Validation of Autoprimary SOA Queries
New
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2026-42001
|
2026-05-22 00:27 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
208
|
5.9 |
MEDIUM
Network
|
-
|
-
|
Concurrency and locking defects in GSS-TSIG
New
|
CWE-364
Signal Handler Race Condition
|
CVE-2026-42002
|
2026-05-22 00:27 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
209
|
4.9 |
MEDIUM
Network
|
-
|
-
|
Insufficient Validation of Member Zone Data May Cause Catalog Zone Transfer to Fail
New
|
CWE-94
Code Injection
|
CVE-2026-42396
|
2026-05-22 00:27 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
210
|
8.2 |
HIGH
Network
|
-
|
-
|
NVIDIA TensorRT contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to data tampering.
New
|
CWE-787
Out-of-bounds Write
|
CVE-2026-24188
|
2026-05-22 00:26 |
2026-05-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|