The latest Security Vulnerabilities
– Authorization Bypass Through User-Controlled Key (CWE-639) in CalendarDeleteEventController (app/Http/Controllers/Calendar/CalendarDeleteEventController.php), exposed at GET /calendar/event/delete/{id}, in Prospero Flow CRM before 5.5.3.
Read More– A vulnerability in Cisco Catalyst Center could allow an unauthenticated, remote attacker to read arbitrary files from a restricted container.
Read More– This vulnerability allows local attackers to disclose sensitive information on affected installations of X.Org Server.
Read More– A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to load arbitrary files from remote locations into an active user session on an affected device, possibly leading to browser-based attacks.
Read MoreCVE number – CVE-2026-10043 This vulnerability allows remote attackers to execute arbitrary code on affected installations of MosaicML Composer. User
Read More– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle PeopleSoft.
Read More– Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device.
Read More– This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung rlottie.
Read More– This vulnerability allows remote attackers to execute arbitrary code on affected installations of NVIDIA Transformers4Rec.
Read More– This vulnerability allows remote attackers to access restricted functionality on affected installations of Microsoft Edge.
Read More
