85 matches found
CVE-2026-120953
A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in flow the driver accepts endpoint addresses supplied by the remote endpoint it is pointed at without validating their scheme, and passes the resulting address to the local...
CVE-2026-120953 Atlas SQL JDBC Driver <=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handler
A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in flow the driver accepts endpoint addresses supplied by the remote endpoint it is pointed at without validating their scheme, and passes the resulting address to the local...
EUVD-2026-116142
A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in flow the driver accepts endpoint addresses supplied by the remote endpoint it is pointed at without validating their scheme, and passes the resulting address to the local...
CVE-2026-120953
A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver (versions
CVE-2026-120953 Atlas SQL JDBC Driver <=4.0.0: OIDC discovery endpoints not scheme-validated - attacker-controlled URI dispatched to OS protocol handler
A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver. During an interactive sign-in flow the driver accepts endpoint addresses supplied by the remote endpoint it is pointed at without validating their scheme, and passes the resulting address to the local...
Linux Distros Unpatched Vulnerability : CVE-2026-109750
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. CVE-2026-109750 Note that Nessus...
CVE-2026-109750
A site isolation issue exists in the DOM: Web Authentication component of Firefox and Thunderbird . This vulnerability was addressed in version 158 for both products. While the technical root cause is not detailed in the documents, the issue is associated with CWE-862 (Missing Authorization) and ...
CVE-2026-109750 Site isolation issue in the DOM: Web Authentication component
Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...
CVE-2026-109750 Site isolation issue in the DOM: Web Authentication component
Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...
CVE-2026-109750: Missing Authorization
Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...
CVE-2026-8794: Observable Timing Discrepancy
PaperCut NG/MF contains an observable timing discrepancy in its authentication component. An unauthenticated remote attacker can exploit this vulnerability to perform username enumeration by measuring response times during login attempts. The system executes a password hash comparison only when a...
CVE-2026-22620: Improper Neutralization of Special Elements used in an SQL Command
Improper input validation in the authentication component of Eaton's Tripp Lite series PADM firmware could allow an unauthenticated remote attacker to bypass authentication and gain a privileged user access to the device...
PT-2026-66453
Name of the Vulnerable Software and Affected Versions Eaton Tripp Lite PADM firmware affected versions not specified Description Improper input validation in the authentication component allows an unauthenticated remote attacker to bypass authentication and gain privileged user access to the...
CVE-2026-15429
A privilege escalation vulnerability exists in the HTTP authentication component in Archer VX1800v v1. Improper handling of user-controlled input may allow newline characters to be injected into internally constructed configuration data. An authenticated user with sufficient privileges may be abl...
PT-2026-55117
A flaw was found in Keycloak's ClientRegistrationAuth component. A remote unauthenticated attacker can exploit this vulnerability by sending a specially crafted POST request with a malformed 'Authorization: Bearer' header to any client registration endpoint. This can lead to an...
[SECURITY] Fedora 44 Update: qt6-qtnetworkauth-6.10.3-1.fc44
Qt6 - NetworkAuth component...
LibSoup NTLM DoS
The vulnerability in the NTLM component of the LibSoup library’s md4sum function is related to buffer overflow in memory. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...
CVE-2024-2378
A vulnerability exists in the web-authentication component of the SDM600. If exploited an attacker could escalate privileges on af-fected installations...
NVIDIA AIStore AuthN Privilege Escalation
The vulnerability of the AuthN component in the NVIDIA AIStore distributed storage system for AI-based applications relates to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to enhance their privileges and gain unauthorized access to protected...