0.0
CVE-2026-26037 -
Not used
0.0
CVE-2026-26036 -
Not used
4.8
CVE-2025-15570 - ckolivas lrzip stream.c lzma_decompress_buf use after free
A vulnerability was found in ckolivas lrzip up to 0.651. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free. Attacking locally is a requirement. The exploit has been made public and could be used. The project was informed of the p…
5
CVE-2025-11537 - Keycloak-server: sensitive headers shown in the http access logs
A flaw was found in Keycloak. When the logging format is configured to a verbose, user-supplied pattern (such as the pre-defined 'long' pattern), sensitive headers including Authorization and Cookie are disclosed to the logs in cleartext. An attacker with read access to the log files can extract th…
7.3
CVE-2025-15569 - Artifex MuPDF win_main.c get_system_dpi uncontrolled search path
A flaw has been found in Artifex MuPDF up to 1.26.1 on Windows. The impacted element is the function get_system_dpi of the file platform/x11/win_main.c. This manipulation causes uncontrolled search path. The attack requires local access. The attack is considered to have high complexity. The exploit…
8.5
CVE-2026-25656 - Improper Configuration File Modification Allows Arbitrary Code Execution with Elevated Privileges
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP3), User Management Component (UMC) (All versions < V2.15.2.1). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, pote…
8.5
CVE-2026-25655 - Unauthorized Configuration File Modification Leads to Arbitrary Code Execution in Siemens SINEC NMS
A vulnerability has been identified in SINEC NMS (All versions < V4.0 SP2). The affected application permits improper modification of a configuration file by a low-privileged user. This could allow an attacker to load malicious DLLs, potentially leading to arbitrary code execution with administrat…
7.3
CVE-2026-23720 - Out‑of‑Bounds Read in Simcenter Femap/Nastran via NDB File Leading to Code Execution
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vulnerability while parsing specially crafted NDB files. This could allow an attacker to execute code in the context of t…
7.3
CVE-2026-23719 - Heap Buffer Overflow in Siemens Simcenter Femap and Nastran via NDB File Parsing
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted NDB files. This could allow an attacker to execute code in the context of the…
7.3
CVE-2026-23718 - Out of Bounds Read in Simcenter Femap and Nastran Enabling Code Execution
A vulnerability has been identified in Simcenter Femap (All versions < V2512), Simcenter Nastran (All versions < V2512). The affected applications contains an out of bounds read vulnerability while parsing specially crafted NDB files. This could allow an attacker to execute code in the context of t…