The vulnerability of the extractMetadataFromMime() function in the MinIO storage server allows a attacker to trigger a service failure.

The vulnerability of the extractMetadataFromMime function in the MinIO storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted X-Minio-Replication- headers...

Important: dotnet10.0

Issue Overview: Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network. CVE-2026-47300 Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-16236

The Realtyna Organic IDX plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 5.3.0. This is due to missing file extension and content validation in the saveLiveImages function combined with an insufficient authorization check on the getkeys AJAX handler a...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in their authentication procedures, which allow attackers to bypass existing security mechanisms.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the deficiencies of its authentication procedures. Exploiting this vulnerability could allow attackers to bypass existing security mechanisms remotely...

ROS-20260729-73-0025

The vulnerability of the Go programming language is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their lack of authentication mechanisms, which allow attackers to circumvent security restrictions.

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication mechanisms. Exploiting these vulnerabilities can allow attackers to bypass security restriction...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its authentication procedures’ flaws, which allow attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to deficiencies in the authentication process. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in their authentication procedures’ flaws, which allow attackers to escalate their privileges.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the deficiencies of the authentication process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

ROS-20260714-73-0043

The vulnerability in MinIO is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers who operate remotely to increase their privileges...

The vulnerability of the Open WebUI web interface, related to deficiencies in the authentication process, allows a perpetrator to gain access to read and modify data.

The vulnerability of the Open WebUI web interface is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain access to and modify data...

The vulnerability of the get_sources_from_items() function in the Open WebUI artificial intelligence-based web interface allows a intruder to gain unauthorized access to protected information.

The vulnerability of the getsourcesfromitems function in the Open WebUI AI-based web interface is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through the Range Addressing RAG...

The vulnerability of the Rust library for session management in Rack applications: Rack::Session, which allows attackers to cause a service failure.

The vulnerability of the Rust library for session management in Rack applications is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE lies in the authentication procedures’ flaws, which allow unauthorized access to protected information by intruders.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Grav API plugin of the Grav CMS content management system, which allows a hacker to increase their privileges.

The vulnerability of the Grav API plugin of the Grav CMS content management system is related to deficiencies in the authentication mechanism. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Azure Active Directory identity management and protection platform, related to authentication process flaws, allows attackers to escalate their privileges.

The vulnerability of the Azure Active Directory identity management and protection platform is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the Remote Function Call module in the infrastructure for extracting and replicating SAP Operational Data Provisioning Data Replication API (ODP-RFC) allows a perpetrator to disclose protected information or cause service interruptions.

The vulnerability of the Remote Function Call module in the SAP Operational Data Provisioning Data Replication API ODP-RFC infrastructure is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to disclose sensitive information or cause servi...

The vulnerability of the integrated environment for managing the development lifecycle of IBM Jazz Foundation, related to deficiencies in the authorization process, allows unauthorized access by intruders to protected information.

The vulnerability of the integrated environment for managing the development lifecycle of IBM Jazz Foundation is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Run Control Management component in the PeopleSoft Enterprise CC Common Application Objects management tool allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Run Control Management component in the PeopleSoft Enterprise CC Common Application Objects management tool is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access t...

The vulnerability of the editUser() and updateUserRights() functions in the phpMyFAQ web application, which allows a violator to increase their privileges

The vulnerability of the editUser and updateUserRights functions in the phpMyFAQ web application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

Vulnerabilities in Oracle PeopleSoft Enterprise

Oracle has identified vulnerabilities in Oracle PeopleSoft Enterprise PT PeopleTools versions 8.61 and 8.62 and PeopleSoft Enterprise CS Campus Community and Student Financials version 9.2.38. The vulnerabilities in Oracle PeopleSoft Enterprise PT PeopleTools versions 8.61 and 8.62 allow...