58849 matches found
ROOT-OS-DEBIAN-12-CVE-2026-53074 CVE-2026-53074 in linux - Patched by Root
Root has patched CVE-2026-53074 in the linux package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-68259 CVE-2025-68259 in linux - Patched by Root
Root has patched CVE-2025-68259 in the linux package for Root:Debian:12. Multiple fixed versions available...
CVE-2026-61908
An out-of-bounds read vulnerability in Cyrus IMAP before 3.12.4 (also fixed in 3.10.4 and 3.8.8) allows an authenticated user to download a crafted JMAP email-header blob ID of the form H-, which reads past the end of the internal blob_headers array, potentially exposing adjacent heap memory . NV...
CVE-2026-79322
SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 mageplaza/magento-2-blog-extension through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary database contents via the id parameter to /mpblog/post/view...
CVE-2026-61908
An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. An authenticated user could attempt to download a crafted JMAP blob ID of the form H-, which could read past the end of the internal blobheaders array during download, exposing...
EUVD-2026-75134
An issue was discovered in Cyrus IMAP before 3.12.4. A JMAP email-header blob ID can reference an out-of-bounds index. An authenticated user could attempt to download a crafted JMAP blob ID of the form H-, which could read past the end of the internal blobheaders array during download, exposing...
The vulnerability of the compatibility package for Microsoft Azure Entra ID allows a perpetrator to circumvent the authentication process by using an alternative path or channel, thereby allowing them to increase their privileges.
The vulnerability of the compatibility package for Microsoft Azure Entra ID involves bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability can allow a malicious actor to gain increased privileges...
CVE-2026-79322
CVE-2026-79322 is a SQL injection vulnerability in the RelatedProduct block of Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through version 4.3.2 . Remote unauthenticated attackers can execute arbitrary SQL commands and read arbitrary database contents by manipulating the id ...
Microsoft Azure Entra ID OAuth Device Code Grant Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Azure. Authentication is not required to exploit this vulnerability. The specific flaw exists within the OAuth Device Code Grant endpoint. The issue results from the generation of...
The vulnerability of the compatibility package for Microsoft Azure Entra ID, related to the absence of authentication, allows a perpetrator to escalate their privileges.
The vulnerability of the compatibility package for Microsoft Azure Entra ID is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
CVE-2026-86994 n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the /rest/active-workflows endpoint returned every active workflow ID on the instance to any member regardless of sharing. Workflow activation, deactivation, and publication push events were also broadcast ...
CVE-2026-86675
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/usedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...
CVE-2026-86675 itsourcecode Sales and Inventory System us_edit.php sql injection
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/usedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...
EUVD-2026-74042
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/usedit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...
CVE-2026-86675
itsourcecode Sales and Inventory System 1.0 contains a SQL injection vulnerability in the file /pages/us_edit.php, triggered through manipulation of the ID argument. The attack can be launched remotely and requires low-level privileges (authenticated access). The CVSS 3.1 base score is 6.3 (MEDIU...
CVE-2026-83941
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network...
CVE-2026-83941
CVE-2026-83941 is a missing authorization vulnerability in Entra ID (Microsoft's identity and access management service) that allows an attacker with low privileges to elevate privileges over a network. The assigned CVSS 3.1 score is 9.9 (CRITICAL) with a scope change, indicating high impact on b...
EUVD-2026-73173
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network...
