CVE-2026-91882

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2026-91882

The Dell Terraform Provider for OME versions 1.0.0 through 1.2.3 is vulnerable to an Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-209). The flaw exists within the API client error handling component , where unauthenticated attackers with remote access can p...

EUVD-2026-101159

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2026-77076

n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability in the GraphQL node. When a GraphQL request fails at the connection level, the node re-throws the underlying HTTP client error unchanged instead of wrapping it in n8n's standard error type. That error...

EUVD-2026-63265

n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability in the GraphQL node. When a GraphQL request fails at the connection level, the node re-throws the underlying HTTP client error unchanged instead of wrapping it in n8n's standard error type. That error...

CVE-2026-77076 n8n before 1.123.69 Credential Leak via GraphQL Node Error

n8n versions before 1.123.69, 2.33.4, and 2.34.1 contain an information disclosure vulnerability in the GraphQL node. When a GraphQL request fails at the connection level, the node re-throws the underlying HTTP client error unchanged instead of wrapping it in n8n's standard error type. That error...

EUVD-2026-30335

Valtimo is an open-source business process automation platform. From 12.4.0 to 12.33.0 and 13.26.0, the LoggingRestClientCustomizer in the web module automatically intercepts all outgoing HTTP calls made via Spring's RestClient and logs the full request body, response body, and response headers...

PT-2026-34965

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the SMB client when parsing symlink error responses. When a CREATE request returns STATUS STOPPED ON SYMLINK, the smb2 check message function returns success without...

EUVD-2021-0889

Malware in sbrugna...

EUVD-2022-45026

Malicious code in bioql PyPI...

[NetScaler-Responder] Responder policy lead to Client "ERR_TOO_MANY_REDIRECTS"

You may want to redirect clients to a backend server's error page if a specific condition is met. The error page is hosted by the same vServer's backend service. You may configure the responder policy like below: add responder action RespErrorPageAct redirect ""/path/to/errorpage.html""...

Linux Distros Unpatched Vulnerability : CVE-2025-21725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: smb: client: fix oops due to unset link speed It isn't guaranteed that...

Important: postgresql16

Issue Overview: Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction between row security and user ID changes. They missed cases where a subquery, WITH query...

baserCMS cross-site scripting vulnerabilities

baserCMS is an Enterprise Content Management System CMS from the baserCMS team. A cross-site scripting vulnerability exists in baserCMS versions prior to 5.1.2, which stems from a cross-site scripting vulnerability in an HTTP 400 error request...

Malicious code in apollo-client-error-template (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fe552e4b70220e1bb21d16486e988a993baf13fe78babd1d269cea3a7a765954 The OpenSSF Package Analysis project identified 'apollo-client-error-template' @ 2.0.0 npm as malicious. It is considered malicious because: - T...

Users unable to reconnect to disconnected session to access their Citrix virtual desktop.

Unable to reconnect to a disconnected session with error "Unknown Client error 1110" when using CVAD 2203 CU3 and earlier. When problem occurs, it is also not possible to connect via RDP. Logon stays at stuck under the "Other User Welcome" screen...

UBUNTU-CVE-2021-47260

In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential NULL dereference in nfsgetclient None of the callers are expecting NULL returns from nfsgetclient so this code will lead to an Oops. It's better to return an error pointer. I expect that this is dead code so...

Beats and Elastic Agent 8.11.3 / 7.17.16 Security Update (ESA-2023-30)

Beats and Elastic Agent Insertion of Sensitive Information into Log File An issue was discovered by Elastic whereby Beats and Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that event to Elasticsearch failed with any 4xx HTTP status code except 409 or...

Error: "The connection to "xxx" failed with status (Unknown client error 1110). SSL Error 31"

When accessing Applications via Citrix Gateway, the Applications' ICA file download successfully, but launching failed with below errors: "Unable to connect to the server. Contact your system administrator with following error: SSL Error 31: The operation completed successfully" Error 'The...

"Unable to Launch Resource" error while switching to HTML5 client

With App protection enabled, if you switch to HTML5 client mid-way into the session/ beginning of the session all the protected and unprotected apps will be enumerated but when you click on launching the session, the below message will appear,which will lead to this document...