|
341
|
- |
|
-
|
-
|
A denial-of-service
vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due to improper handling of
syntactically invalid input. Crafted inputs
can trigger a processing error…
New
|
CWE-20
Improper Input Validation
|
CVE-2026-8714
|
2026-06-6 02:17 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
342
|
5.8 |
MEDIUM
Network
|
-
|
-
|
On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is …
New
|
CWE-1023
Incomplete Comparison with Missing Factors
|
CVE-2026-7473
|
2026-06-6 02:17 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
343
|
6.5 |
MEDIUM
Network
|
-
|
-
|
7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in…
New
|
CWE-125
CWE-190
Out-of-bounds Read
Integer Overflow or Wraparound
|
CVE-2026-48112
|
2026-06-6 02:16 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
344
|
4.3 |
MEDIUM
Network
|
-
|
-
|
7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability in the ParseDepedencyExpression function of the UEFI firmwar…
New
|
CWE-125
Out-of-bounds Read
|
CVE-2026-48111
|
2026-06-6 02:16 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
345
|
4.2 |
MEDIUM
Network
|
-
|
-
|
7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain an uninitialized heap read in the SquashFS archive handler caused by a sparsely populated index array. In t…
New
|
CWE-125
CWE-908
Out-of-bounds Read
Use of Uninitialized Resource
|
CVE-2026-48104
|
2026-06-6 02:16 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
346
|
4.3 |
MEDIUM
Network
|
-
|
-
|
7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain an off-by-one heap out-of-bounds read in the WIM (Windows Imaging) archive handler's security descriptor lo…
New
|
CWE-125
Out-of-bounds Read
|
CVE-2026-48103
|
2026-06-6 02:16 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
347
|
6.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_41CF20 of the file /boafrm/formUSSDSetup. The manipulation of the argument ussdValue results in …
New
|
CWE-74
CWE-77
Injection
Command Injection
|
CVE-2026-11339
|
2026-06-6 02:16 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
348
|
2.4 |
LOW
Network
|
-
|
-
|
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user. The manipulation of t…
New
|
CWE-79
CWE-94
Cross-site Scripting
Code Injection
|
CVE-2026-11338
|
2026-06-6 02:16 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
349
|
4.3 |
MEDIUM
Network
|
-
|
-
|
A vulnerability was found in tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3/a38852979f7e27ae67b610dce5979500ef8ebe01. Affected by this vulnerability is an unknown func…
New
|
CWE-79
CWE-94
Cross-site Scripting
Code Injection
|
CVE-2026-11337
|
2026-06-6 02:16 |
2026-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
350
|
6.3 |
MEDIUM
Network
|
-
|
-
|
Inappropriate implementation in Media Session in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medi…
New
|
CWE-346
Origin Validation Error
|
CVE-2026-11181
|
2026-06-6 02:16 |
2026-06-5 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
