57 matches found
CVE-2026-109812 Missing Authorization on Secret Endpoints
A missing authorization vulnerability exists in the internal API /api/v1/secrets/ of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the...
EUVD-2026-102593
A missing authorization vulnerability exists in the internal API /api/v1/secrets/ of some of Moxa's industrial computing products. A low-privileged authenticated attacker with adjacent network access could exploit this vulnerability to access sensitive information, potentially resulting in the...
ROS-20260930-73-0005
The vulnerability of the wireless/wext-core.c component in the Linux operating system is related to the lack of initialization for that resource. Exploiting this vulnerability can allow an attacker to gain access to confidential data...
CVE-2026-58222: Improper Neutralization of Special Elements used in an LDAP Query
A security flaw combining LDAP filter injection and improper authorization checks was found in Samba Active Directory Domain Controller AD DC. When processing LDAP Compare requests, Samba fails to properly validate user-supplied attribute names and executes the resulting internal database search ...
CVE-2026-44101: Missing Authentication for Critical Function
Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to Denial-of-Service and confidential data being disclosed to the attacker...
EUVD-2026-44584
Improper Neutralization of Special Elements used in an SQL Command "SQL Injection" in the web management interface of certain ASUS router models allows a remote authenticated user to disclose confidential information via a crafted request that bypasses existing input validation Refer to the ' ...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the ulpiregister function in the drivers/usb/common/ulpi.c module of the Linux kernel involves the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...
PKI Vault Disclosure Confidential Information
The vulnerability of the PKI Vault platform, which is used for archiving corporate information, in HashiCorp Vault Community Edition and Vault Enterprise, stems from insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to disclose...
Adobe SDK DNG Buffer Overflow Info Disclosure
The vulnerability of the DNG file reading and writing software developed by Adobe’s SDK is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to disclose confidential information by opening the malicious file...
CVE-2026-44874 Authenticated Arbitrary File Download via AOS-10 Web-Based Management Interface
A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the underlying operating system. Successful exploitation of this vulnerability could result in the disclosure of confidential system...
Linux kernel TCP Packets In Flight DoS
The vulnerability of the tcppacketsinflight function in the include/net/tcp.h module of the Linux kernel relates to the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...
Snort Detection Unauthorized Access
The vulnerability of the Snort detection mechanism of Cisco Secure Firewall’s Threat Defense system is related to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential information...
CVE-2026-24322 Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)
SAP Solution Tools Plug-In ST-PI contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability...
CVE-2018-1000827
Ubilling version = 0.9.2 contains a Other/Unknown vulnerability in user-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution...
CVE-2018-1000837
UML Designer version = 8.0.0 contains a XML External Entity XXE vulnerability in XML parser for plugins that can result in Disclosure of confidential data, denial of service, SSRF, port scanning. This attack appear to be exploitable via malicious plugins.xml file...
CVE-2026-22242: SQL Injection: Hibernate
CoreShop is a Pimcore enhanced eCommerce solution. Prior to version 4.1.8, a blind SQL injection vulnerability exists in the application that allows an authenticated administrator-level user to extract database contents using boolean-based or time-based techniques. The database account used by th...
Transformation Extender Advanced Information Disclosure
The vulnerability of the software solution for integrating corporate-level data with the Transformation Extender Advanced solution is related to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose confidential information...
EUVD-2018-0819
Malware in sbrugna...