262288 matches found
CVE-2026-41670
Admidio is an open-source user management solution. Prior to version 5.0.9, the SAML IdP implementation in Admidio's SSO module uses the AssertionConsumerServiceURL value directly from incoming SAML AuthnRequest messages as the destination for the SAML response, without validating it against the...
CVE-2026-32995
The Rocket.Chat DDP method autoTranslate.translateMessage in versions 8.5.0, 8.4.2, 8.3.4, 8.2.4, 8.1.5, 8.0.5, 7.13.8, and 7.10.12 accepts a client-supplied IMessage object and passes it directly to translateMessage without checking Meteor.userId or verifying room membership. Any authenticated D...
CVE-2026-50213
The account validation endpoint /v1/User/validate returns comprehensive user profile data sheets, which can be crawled by iterating predictable identification strings...
CVE-2026-5264
Heap buffer overflow in DTLS 1.3 ACK message processing. A remote attacker can send a crafted DTLS 1.3 ACK message that triggers a heap buffer overflow...
CVE-2026-49189
Unchecked public access permissions on a core Broadcast Receiver allow unauthorized local software components to invoke administrative operations...
CVE-2026-49202
Internal multimedia session archives are accessible without authentication, exacerbated by loose Cross-Origin Resource Sharing CORS rules that allow cross-site theft...
CVE-2026-49197
Web endpoints intended for the Acer Connect app improperly validate the HTTP Authorization header, failing to block requests when Base64 decoding fails...
CVE-2026-9208
Tanium addressed an unauthorized code execution vulnerability in Connect...
CVE-2026-9631
A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. Affected by this vulnerability is the function strcpy of the file /goform/formConfigFastDirectionW of the component Web Management Interface. Performing a manipulation of the argument Profile results in stack-based buffer...
GHSA-WX45-VX6H-76CQ vulnerabilities
Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-17-openj9...
CVE-2025-10911 vulnerabilities
Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-17-openj9...
GHSA-G23F-VWRR-7M5P vulnerabilities
Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-21-openj9, openjdk-11-openj9, openjdk-17-openj9...
CVE-2026-45715
Budibase is an open-source low-code platform. Prior to 3.38.1, the REST datasource integration packages/server/src/integrations/rest.ts follows HTTP redirects without re-checking the IP blacklist, allowing an authenticated Builder to access internal services cloud metadata, databases by redirecti...
GHSA-5XRQ-8626-4RWP vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips, gitlab-rails-ce-fips, vitess, gitlab-rails-ce...
CVE-2026-6483
A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function strcat/snprintf of the file /cgi-bin/internet.cgi. The manipulation results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used...
CVE-2026-9885 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-56PJ-6HM3-QPFX vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-R8VC-287H-HWXG vulnerabilities
Vulnerabilities for packages: chromium...