115279 matches found
CVE-2026-49008 Integrity‑check credential leakage vulnerability in an application function of ZTE F689 product
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device...
CVE-2026-49008
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device...
[SECURITY] Fedora 43 Update: abrt-2.17.9-1.fc43
abrt is a tool to help users to detect defects in applications and to create a bug report with all information needed by maintainer to fix it. It uses plugin system to extend its functionality...
EUVD-2026-54318
Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...
CVE-2026-49163
Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...
CVE-2026-47363: Improper Export of Android Application Components
In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied session including OAuth tokens from Intent extras with no permission guard, and signs the app into that session without validating it against the backend. Th...
CVE-2026-47362: Insecure Storage of Sensitive Information
In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: LocalNotificationDatabase notification title, message, recipient, service, tags, and on-call/incident deep links and SearchRecentDatabase the user's full in-a...
CVE-2026-47361: Improper Export of Android Application Components
In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SEND intent with a caller-supplied conversationid. When the activity closes and no in-process session matches that ID, it unconditionally cancels notification ...
CVE-2026-44965: Improper Export of Android Application Components
In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities IncidentWidgetActivity, MonitorSavedViewWidgetActivity, OnCallShiftsWidgetActivity, OnCallPagesWidgetActivity, SloWidgetActivity, DashboardWidgetActivity are exported with no permission...
RHEL 9 : RHEL AI 3.6 RPM runtime CVE fix - thrift (Important) (RHSA-2026:51358)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:51358 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...
CVE-2026-49163 Application Insights Profiler Elevation of Privilege Vulnerability
...
CVE-2026-49163 Application Insights Profiler Elevation of Privilege Vulnerability
...
CVE-2026-49163
Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...
CVE-2026-49163
CVE-2026-49163 concerns an improper limitation of a pathname to a restricted directory (path traversal) in Application Insights Profiler, enabling an authorized attacker to elevate privileges over the network. The entry specifies a CVSSv3.1 base score of 8.8 (High) with Network attack vector, Low...
DEBIAN-CVE-2026-67422
pymdown-extensions is a collection of extensions for the Python Markdown library. In versions up to and including 11.0, four inline processors caret, tilde, betterem, and magiclink use regular expressions whose content groups can partition a run of delimiter characters in exponentially many ways,...
zaproxy w2026-08-06
The Zed Attack Proxy ZAP by Checkmarx is the world’s most widely used web app scanner. Free and open source. A community based GitHub Top 1000 project that anyone can contribute to. It can help you automatically find security vulnerabilities in your we...
CVE-2026-5855
Contiki-NG: LwM2M TLV parser in os/services/lwm2m/lwm2m-tlv.c (function lwm2m_tlv_read) ignores the caller’s buffer length and may read up to six bytes without bounds checks. The engine loop continues while bytes remain, so a crafted CoAP WRITE to any LwM2M endpoint whose final TLV supplies exact...
Security Bulletin: IBM Maximo Application Suite uses httpcore5-5.3.4.jar which is vulnerable to CVE-2026-54399
Summary IBM Maximo Application Suite uses httpcore5-5.3.4.jar which is vulnerable to CVE-2026-54399. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-54399 DESCRIPTION: Uncontrolled Resource Consumption vulnerability in the...
Application Insights Profiler Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...
