83043 matches found
CLEANSTART-2026-PZ72315 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON
CVE-2026-49844 affects multiple packages. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...
CVE-2026-87680
A command injection vulnerability exists in the REST API management interface of Brocade Fabric OS versions prior to 10.0.1 . This flaw allows an authenticated user to execute arbitrary system commands by providing crafted input parameters . The vulnerability is addressed in FOS 10.0.1 .
CVE-2026-87680
A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters...
EUVD-2026-94654
A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters...
CVE-2026-87679
Brocade Fabric OS versions before 10.0.1 are vulnerable to a heap-based buffer overflow (CWE-122) during trunk configuration operations. The application fails to enforce boundary checks when parsing user-supplied list strings into dynamically allocated heap arrays. An authenticated administrator ...
CVE-2026-87679
When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...
EUVD-2026-94653
When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...
Exploit for Improper Verification of Cryptographic Signature in Wso2 Api_Control_Plane
CVE-2026-5430 — WSO2 API Manager JWT Algorithm Bypass Det...
CVE-2025-12030
CVE-2025-12030: ACF to REST API WordPressプラグインにおける安全でない直接オブジェクト参照 キーワード: CVE-2025-12030, ACF to REST API vulnerability, IDOR, WordPress security, authenticated exploit, WordPress plugin vulnerability, CWE-639, ACF field modification, authorization bypass, WordPress CVE 2025, Advanced Custom Field...
PT-2026-107724
When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...
PT-2026-107999
Integrics Enswitch 3.13 through 4.4 contains an authentication bypass vulnerability in /api/json/user/password/update/ that allows unauthenticated attackers to change account passwords by omitting the reset parameter. Attackers can target accounts with no pending reset, whose empty reset key...
PT-2026-108119
CVE ID: CVE-2026-97147 Severity: UNKNOWN Severity and score come from CVSS ratings in the National Vulnerability Database NVD, the NIST repository of standardized vulnerability data. In OpenStack Mistral through 23.0.0, several of the v2 API write paths resolve the target object with a query that...
PT-2026-107865
An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes configuration data intended for administrator-managed cluster configuration. The exposed kubeconfig data contains credentials that may allow users to authenticate directly to the...
PT-2026-107800
An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1. An authenticated user possessing USB management privileges can manipulate requested target paths to delete arbitrary file...
PT-2026-107804
An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When updating system timezone settings via the REST API or configuration download routines, the system fails to sanitize input values...
PT-2026-107782
A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data across...
PT-2026-107783
An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively on client-controlled HTTP headers. An authenticated user with any valid REST session can spoof these headers ...
PT-2026-107835
The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of its AI Abilities API actions, allowing an authenticated user holding the LatePoint Agent role, normally restricted to their own records, to read and modify other agents' profile da...
PT-2026-108131
Name of the Vulnerable Software and Affected Versions Docker Sandboxes affected versions not specified Description Docker Sandboxes may fail open when masking credentials in protected proxy responses. This occurs when a response-body read returns data simultaneously with an error, causing affecte...