https://db.gcve.eu Latest vulnerabilities published by the CNAs operating under the jpcert root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Thu, 27 Aug 2026 23:19:17 +0000 https://db.gcve.eu/vuln/cve-2026-76149 CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file. CorvusSKK contains an integer overflow vulnerability, which may allow malicious data to be written to a dictionary file. https://db.gcve.eu/vuln/cve-2026-76149 Wed, 26 Aug 2026 04:55:14 +0000 https://db.gcve.eu/vuln/cve-2026-76148 CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product. CorvusSKK contains a code injection vulnerability, which may lead to arbitrary code execution on the affected product. https://db.gcve.eu/vuln/cve-2026-76148 Wed, 26 Aug 2026 04:55:07 +0000 https://db.gcve.eu/vuln/cve-2026-73335 Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be executed within the affected application. Android application "Myna Point" is vulnerable to Improper Authorization in Handler for Custom URL Scheme (CWE-939). A malicious application installed on the user's Android device may exploit the affected application's functionality through an Intent, potentially allowing arbitrary JavaScript to be executed within the affected application. https://db.gcve.eu/vuln/cve-2026-73335 Wed, 26 Aug 2026 04:54:58 +0000 https://db.gcve.eu/vuln/cve-2026-59769 FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number. FA-50 all versions contain hard-coded credentials. An attacker, who knows the credentials and has access to the vessel's internal network, can operate the settings screen using that credentials to alter the identification number. https://db.gcve.eu/vuln/cve-2026-59769 Tue, 25 Aug 2026 07:43:10 +0000 https://db.gcve.eu/vuln/cve-2026-67578 FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters. FA-50 all versions miss authentication for some configuration. An attacker with access to the vessel's internal network can manipulate the product's settings screen to alter some configuration parameters. https://db.gcve.eu/vuln/cve-2026-67578 Tue, 25 Aug 2026 07:42:26 +0000 https://db.gcve.eu/vuln/cve-2026-68959 SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726. SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726. https://db.gcve.eu/vuln/cve-2026-68959 Tue, 25 Aug 2026 06:27:59 +0000 https://db.gcve.eu/vuln/cve-2026-68062 SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726. SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected products installed and can receive UDP packets from that system. Note that this vulnerability is due to an incomplete fix for CVE-2024-41726. https://db.gcve.eu/vuln/cve-2026-68062 Tue, 25 Aug 2026 06:27:54 +0000 https://db.gcve.eu/vuln/cve-2026-66109 A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege. A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to the Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege. https://db.gcve.eu/vuln/cve-2026-66109 Tue, 25 Aug 2026 06:27:50 +0000 https://db.gcve.eu/vuln/cve-2026-68960 A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected product installed and can receive UDP packets from that system. A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected product installed and can receive UDP packets from that system. https://db.gcve.eu/vuln/cve-2026-68960 Tue, 25 Aug 2026 06:27:20 +0000 https://db.gcve.eu/vuln/cve-2026-69665 SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege. SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may execute arbitrary code with SYSTEM privilege. https://db.gcve.eu/vuln/cve-2026-69665 Tue, 25 Aug 2026 06:27:10 +0000