|
2051
|
6.2 |
MEDIUM
Local
|
-
|
-
|
In Arm ArmNN through 2026-03-27, an integer overflow in TensorShape::GetNumElements() in armnn/Tensor.cpp allows a crafted TFLite model file to bypass buffer size validation and trigger a heap-based …
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2026-42627
|
2026-05-27 01:16 |
2026-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2052
|
- |
|
-
|
-
|
An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ONLYOFFICE DocSpace before 3.2.1. The flaw exists in multiple REST API endpoints. This allows authenticated users with low-l…
|
-
|
CVE-2026-38587
|
2026-05-27 01:16 |
2026-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2053
|
7.0 |
HIGH
Local
|
samba
|
rsync
|
Rsync versions before 3.4.3 contain a time-of-check to time-of-use (TOCTOU) race condition in daemon file handling that allows attackers to redirect file writes outside intended directories by replac…
|
CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
|
CVE-2026-29518
|
2026-05-27 01:16 |
2026-05-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2054
|
7.8 |
HIGH
Local
|
-
|
-
|
A high-severity vulnerability in the deployment of Genetec RabbitMQ that allows a privilege escalation attack.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2026-25112
|
2026-05-27 01:16 |
2026-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2055
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
In the Linux kernel, the following vulnerability has been resolved:
net: skbuff: preserve shared-frag marker during coalescing
skb_try_coalesce() can attach paged frags from @from to @to. If @from…
|
CWE-787
Out-of-bounds Write
|
CVE-2026-46300
|
2026-05-27 00:46 |
2026-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2056
|
7.3 |
HIGH
Network
|
-
|
-
|
A security flaw has been discovered in Das Parking Management System 停车场管理系统 6.2.0. This vulnerability affects unknown code of the component Search API Endpoint. The manipulation of the argument Valu…
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-9552
|
2026-05-27 00:17 |
2026-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2057
|
7.3 |
HIGH
Network
|
-
|
-
|
A vulnerability was identified in Das Parking Management System 停车场管理系统 6.2.0. This affects the function xp_cmdshell of the file ParkingRecord/ExportParkingRecords of the component API Endpoint. The …
|
CWE-74
CWE-89
Injection
SQL Injection
|
CVE-2026-9551
|
2026-05-27 00:17 |
2026-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2058
|
7.3 |
HIGH
Network
|
-
|
-
|
A vulnerability was determined in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0. Affected by this issue is some unknown functionality of the file /SubstationWE…
|
CWE-22
Path Traversal
|
CVE-2026-9550
|
2026-05-27 00:16 |
2026-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2059
|
8.5 |
HIGH
Network
|
-
|
-
|
A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the "print command" setting via the "%J"
substitution charac…
|
CWE-78
OS Command
|
CVE-2026-4480
|
2026-05-27 00:16 |
2026-05-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
2060
|
5.6 |
MEDIUM
Network
|
-
|
-
|
When the DLP is active, the UserCheck Web Portal contains an input-handling issue in the UserChoice flow. Under specific conditions, an attacker who can access the UserCheck Ask page could attempt to…
|
CWE-89
SQL Injection
|
CVE-2026-48134
|
2026-05-27 00:16 |
2026-05-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
