6503 matches found
CVE-2026-80436
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges due to improper authorization...
CVE-2026-81211
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows...
CVE-2026-80378
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper authorization...
CVE-2026-80378 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to improper authorization...
CVE-2026-80378
IBM DataStage on Cloud Pak for Data 5.4.0.0 contains an improper authorization flaw that a remote authenticated attacker can exploit to cause a denial of service . The CVSS 3.1 score is 8.5 (HIGH) , with a changed scope, low integrity impact, and high availability impact. The CVE title references...
CVE-2026-80436
IBM DataStage on Cloud Pak for Data 5.4.0.0 contains an improper authorization flaw that allows a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges . The vulnerability requires low privileges, is exploitable over the network with no user...
CVE-2026-80436 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service by deleting arbitrary RabbitMQ queues or exchanges due to improper authorization...
CVE-2026-81211 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows...
CVE-2026-81211
IBM Langflow OSS versions 1.0.0 through 1.11.5 are vulnerable to arbitrary Python code execution by a remote authenticated attacker. The root cause is a missing authorization check (CWE-862): the LANGFLOW_CUSTOM_COMPONENT_ADMIN_ONLY policy is enforced on the direct custom-component endpoint but n...
CVE-2026-18994
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...
EUVD-2026-75752
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...
CVE-2026-18994
A potential improper authorization vulnerability was reported in the Lenovo File Manager Android Application, distributed exclusively in the Chinese market, that could allow a local authenticated user to read or modify protected files within the application...
CVE-2026-18994
CVE-2026-18994 is a potential improper authorization vulnerability in the Lenovo File Manager Android Application , which is distributed exclusively in the Chinese market. A local authenticated user could read or modify protected files within the application. Lenovo rates this HIGH severity with ...
PT-2026-89628
šØ CVE-2026-81211 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacker to execute arbitrary Python code due to improper authorization of custom components in stored flows. š@cveNotify...
CVE-2026-67403
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
CVE-2026-68484
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
EUVD-2026-75060
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier...
CVE-2026-67403
Cash Collect (Sage) has an improper authorization vulnerability in the Sage AR Automation API . Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non-predictable tenant identifier. The CVSS ...
CVE-2026-68484
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...
EUVD-2026-75061
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges...