193 matches found
CVE-2026-103495
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...
EUVD-2026-90586
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...
CVE-2026-103495
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...
CVE-2026-103495
In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...
CVE-2026-103495
Versions of JetBrains YouTrack prior to 2026.2.19422 are vulnerable to a missing authorisation flaw. This security weakness allows for the unauthorized reloading of translation catalogs . The CVSS 3.1 score is 4.3 (Medium) , with a network attack vector and low complexity. Exploitation details an...
The vulnerability of the JFrog Artifactory repository management platform, related to deficiencies in path name restrictions for restricted catalogs, allows attackers to write arbitrary files.
The vulnerability of the JFrog Artifactory repository management platform is related to deficiencies in path name restrictions for restricted catalogs. Exploiting this vulnerability could allow a malicious actor to write arbitrary files...
EulerOS Virtualization 2.13.1 : libxml2 (EulerOS-SA-2026-3183)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function...
JLSEC-2026-1239
A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to...
PT-2026-80481
A flaw was found in the libxml2 library. This uncontrolled resource consumption vulnerability occurs when processing XML catalogs that contain repeated elements pointing to the same downstream catalog. A remote attacker can exploit this by supplying crafted catalogs, causing the parser to...
EulerOS 2.0 SP13 : libxml2 (EulerOS-SA-2026-2980)
According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatal...
EulerOS 2.0 SP13 : libxml2 (EulerOS-SA-2026-3030)
According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatal...
EulerOS 2.0 SP15 : libxml2 (EulerOS-SA-2026-2937)
According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatal...
EulerOS 2.0 SP15 : libxml2 (EulerOS-SA-2026-2896)
According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function xmlParseSGMLCatal...
NocoBase: Sensitive Data Exposure via SQL Blacklist Bypass
Security Vulnerability Report: Sensitive Data Exposure via SQL Blacklist Bypass Summary The checkSQL function in plugin-collection-sql implements a keyword-based blacklist to prevent dangerous SQL queries from being executed through the SQL Collection feature. However, the blacklist is incomplete...
GHSA-V8VM-CQH8-Q87Q NocoBase: Sensitive Data Exposure via SQL Blacklist Bypass
Security Vulnerability Report: Sensitive Data Exposure via SQL Blacklist Bypass Summary The checkSQL function in plugin-collection-sql implements a keyword-based blacklist to prevent dangerous SQL queries from being executed through the SQL Collection feature. However, the blacklist is incomplete...
CVE-2026-43738
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may result in disclosure of process memory...
EUVD-2026-49482
The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8. Processing a maliciously crafted asset catalog may result in disclosure of process memory...
EulerOS Virtualization 2.12.0 : libxml2 (EulerOS-SA-2026-2785)
According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in libxml2 up to 2.14.5. It has been declared as problematic. This vulnerability affects the function...
ROS-20260707-73-0010
The vulnerability in rubygem-yard is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Astra Linux – Vulnerability in libxml2
A flaw was discovered in the libxml2 library. This vulnerability arises from uncontrolled resource consumption when processing XML catalogs that contain repeated elements pointing to the same downstream catalog. A remote attacker can exploit this vulnerability by providing malicious catalogs,...