262265 matches found
EUVD-2026-36395
The JwtAccessTokenValidator class in Apache CXF fails to validate the 'aud' Audience claims of incoming JWT access tokens. This allows a JWT issued for one Resource Server to be successfully replayed against a completely different Resource Server, leading to Token Confusion/Routing attacks. Users...
CVE-2026-50623
An authentication bypass vulnerability exists in the OAuth2 TokenIntrospectionService in Apache CXF. Due to a missing 'throw' keyword in the security context check, the introspection endpoint /services/oauth2/introspect can be accessed by any unauthenticated network attacker. However note that th...
EUVD-2026-36393
An authentication bypass vulnerability exists in the OAuth2 TokenIntrospectionService in Apache CXF. Due to a missing 'throw' keyword in the security context check, the introspection endpoint /services/oauth2/introspect can be accessed by any unauthenticated network attacker. However note that th...
CVE-2026-50623 Apache CXF: Authentication Bypass in OAuth2 TokenIntrospectionService
An authentication bypass vulnerability exists in the OAuth2 TokenIntrospectionService in Apache CXF. Due to a missing 'throw' keyword in the security context check, the introspection endpoint /services/oauth2/introspect can be accessed by any unauthenticated network attacker. However note that th...
OPENSUSE-SU-2026:20948-1 Security update for enc
This update for enc fixes the following issues: Changes in enc: - CVE-2026-1229: Fix incorrect value bsc1265533 Bump circl to 1.6.3 - Update to 1.1.5: Update dependencies 10 - Update to 1.1.4: Update all dependencies 9...
CVE-2026-46645
creationtimestamp| type| source ---|---|--- 2026-06-12 07:00:12+00:00| published-proof-of-concept| Telegram/j7dvhapQ8jKj3IljPE9xOUYg2H-CzPIm6g4IxbeEgHulAw...
CVE-2026-48610
Under certain network configurations, a malicious actor with access to network could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to make unauthorized changes to such UniFi OS devices...
Security Bulletin: Multiple vulnerabilities have been addressed in IBM Aspera Shares
Summary Multiple vulnerabilities have been addressed in IBM Aspera Shares Version 1.11.3 Vulnerability Details CVEID:CVE-2026-42245 DESCRIPTION: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4,...
SUSE CVE-2026-48856
Sensitive Data Exposure vulnerability in Erlang OTP inets httpcresponse module allows Retrieve Embedded Sensitive Data. The httpc client forwards the Authorization and Proxy-Authorization request headers to redirect targets without checking whether the redirect crosses an origin boundary...
GHSA-MJ29-63W7-JWQF vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-QFHP-X82V-PPCM vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-C729-J7CM-X9P7 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-R6R7-44PC-4G42 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-11678 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-MHRM-MF55-J4P7 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-Q4P8-CGH7-Q73X vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-WX4M-978H-JHX3 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-78GR-622P-8FM9 vulnerabilities
Vulnerabilities for packages: chromium...