1049889 matches found
CVE-2026-95766: Hewlett Packard Enterprise (HPE) Fabric Composer: Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated…
Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to disclose sensitive information...
CVE-2026-95768: Hewlett Packard Enterprise (HPE) Fabric Composer: A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions…
A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an authenticated low-privileged remote attacker to obtain sensitive information from the affected system...
CVE-2026-95767: Hewlett Packard Enterprise (HPE) Fabric Composer: An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer
An unauthenticated information disclosure vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could allow an unauthenticated remote attacker to obtain sensitive information about the affected system...
CVE-2026-95744: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability in the affected interface of HPE Networking Fabric Composer could…
A sensitive information disclosure vulnerability in the affected interface of HPE Networking Fabric Composer could allow an authenticated low-privileged attacker to access sensitive information, if certain preconditions outside of the attacker's control are met. Successful exploitation could allo...
CVE-2026-95746: Hewlett Packard Enterprise (HPE) Fabric Composer: An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an…
An authentication bypass vulnerability in the API endpoint of HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an...
CVE-2026-95751: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper certificate validation vulnerability in the API of HPE Networking Fabric Composer could allow an…
An improper certificate validation vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to circumvent existing authentication controls if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an...
CVE-2026-95743: Hewlett Packard Enterprise (HPE) Fabric Composer: Local privilege escalation vulnerabilities exist in the underlying operating system of HPE Networking Fabric Composer
Local privilege escalation vulnerabilities exist in the underlying operating system of HPE Networking Fabric Composer. Successful exploitation could allow a local attacker with low privileges to gain elevated privileges on the affected system...
CVE-2026-95729: Hewlett Packard Enterprise (HPE) Virtual Intranet Access (VIA): A sensitive information disclosure vulnerability exists in HPE Networking VIA
A sensitive information disclosure vulnerability exists in HPE Networking VIA. Successful exploitation could allow an authenticated attacker to obtain sensitive information...
CVE-2026-95740: Hewlett Packard Enterprise (HPE) Fabric Composer: An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated…
An improper certificate validation vulnerability in HPE Networking Fabric Composer could allow an unauthenticated adjacent attacker to intercept communications between the affected system and remote servers if certain preconditions outside of the attacker's control are met. Successful exploitatio...
CVE-2026-89292: Eclipse Foundation Eclipse Mnestix: In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker…
In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker to exfiltrate the MNESTIXBACKENDAPIKEY for all configured Infrastructures...
CVE-2026-116845: netbox-community netbox: NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows…
NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows authenticated users to bypass view permissions on parent devices and virtual machines. Attackers with add-component permission can submit arbitrary device or VM IDs, or all with...
CVE-2026-116664: Tanium Discover: Tanium addressed an improper access controls vulnerability in Discover.
Tanium addressed an improper access controls vulnerability in Discover...
CVE-2026-111752: angular: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and…
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.33, 21.2.25, and 22.2.1, @angular/router in Node.js server-side rendering fails to require auxiliary outlet URL segments to match routes configured for...
CVE-2026-115298: Elastic Elasticsearch: Incorrect Authorization (CWE-863) in Elasticsearch can lead to information disclosure via Accessing Functionality Not…
Incorrect Authorization CWE-863 in Elasticsearch can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user whose index access is restricted by field-level security can retrieve the value of a constantkeyword field that their rol...
CVE-2026-119495: WebberZone Better Search: Missing Authorization vulnerability in WebberZone Better Search better-search allows Exploiting Incorrectly Configured…
Missing Authorization vulnerability in WebberZone Better Search better-search allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Better Search: from n/a through 4.5.2...
CVE-2026-119509: eranfl ClickCease Click Fraud Protection: Missing Authorization vulnerability in eranfl ClickCease Click Fraud Protection clickcease-click-fraud-protection…
Missing Authorization vulnerability in eranfl ClickCease Click Fraud Protection clickcease-click-fraud-protection allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ClickCease Click Fraud Protection: from n/a through 3.3.0...
CVE-2026-119636: Devolutions Server: Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server…
Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server 2025.3.2.0 through 2026.2.22.0 allows an authenticated user with checkout rights on a PAM account to retain access to that account on the target system after the checkout expires via a...
CVE-2026-120331: TYPO3 Extension "Mail": Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the…
Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the target host. Backend users with access to the mail module can make the server send requests to hosts in the internal network...
CVE-2026-120333: TYPO3 Extension "Frontend User Registration": The actions linked in the emails of the extension (e.g
The actions linked in the emails of the extension e.g. to confirm a registration or the deletion of an account do not reject requests with a missing or invalid hash. Instead, the frontend user given in the request is used. Unauthenticated attackers can therefore perform these actions for arbitrar...
CVE-2026-121112: Google Chrome: Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised…
Out of bounds read in Permissions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...