16 matches found
CVE-2026-26069
creationtimestamp| type| source ---|---|--- 2026-02-13 00:00:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mep77ylncm2m 2026-02-13 00:00:58+00:00| seen| https://infosec.exchange/users/offseq/statuses/116060379050409593...
CVE-2026-26069 Scraparr Readarr Integration exposes sensitive values as metric labels.
Scraparr is a Prometheus Exporter for various components of the arr Suite. From 3.0.0-beta to before 3.0.2, when the Readarr integration was enabled, the exporter exposed the configured Readarr API key as the alias metric label value. Users were affected only if all of the following conditions ar...
Lexmark Printers Improper Input Validation (CVE-2023-26069)
An input validation vulnerability has been identified in the web API in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503901; scriptversion"1.3";...
CVE-2023-26069
Certain Lexmark devices through 2023-02-19 mishandle Input Validation issue 3 of 4...
CVE-2024-26069
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...
CVE-2024-26069 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...
CVE-2024-26069
Adobe Experience Manager (AEM) versions 6.5.19 and earlier are affected by a stored XSS vulnerability in vulnerable form fields that can inject malicious JavaScript executed in a victim’s browser. Contributing details from connected sources confirm the issue is a stored XSS (CWE-79) and that expl...
CVE-2023-26069
The CVE-2023-26069 issue affects Lexmark devices with vulnerable web API input handling. The Tenable NASL and Red Hat/NVD references describe an input validation vulnerability that can be leveraged remotely to execute arbitrary code on affected Lexmark printers/devices (no exploit specifics in th...
Lexmark Printer Input Validation Vulnerability (CVE-2023-26069)
Multiple Lexmark printer devices are prone to an input validation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...
Google Android elevation of privilege vulnerability (CNVD-2023-26069)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges...
CVE-2022-26069
creationtimestamp| type| source ---|---|--- 2022-03-29 20:11:42+00:00| seen| https://t.me/cibsecurity/39768...
CVE-2022-26069
Delta Electronics DIAEnergie is affected by a blind SQL injection in Get or HandlerPage_KID.ashx (CVE-2022-26069). The vulnerability affects all versions prior to 1.9; upgrade to 1.9 or later to fix. Impact includes potential disclosure, modification of database contents, and command execution, w...
Atlassian Jira < 8.5.11 Multiple Vulnerabilities
According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.11, 8.6.x 8.13.3 or 8.14.x 8.15.0. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability in the...
CVE-2021-26069
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary files and enumerate project keys via an Information Disclosure vulnerability in the /rest/api/1.0/issues/id/ActionsAndOperations API endpoint. The affected versions are before...
CVE-2021-26069
CVE-2021-26069 affects Atlassian Jira Server/Data Center via an information-disclosure vulnerability in the /rest/api/1.0/issues/{id}/ActionsAndOperations endpoint. Affected versions are before 8.5.11, 8.6.0 before 8.13.3, and 8.14.0 before 8.15.0, allowing unauthenticated remote attackers to dow...
Unauthenticated information leakage of temporary files and project keys - CVE-2021-26069
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary files and enumerate project keys via an Information Disclosure vulnerability in the /rest/api/1.0/issues/\id/ActionsAndOperations API endpoint. The affected versions are before...