16588 matches found
CVE-2026-100730: Deserialization of Untrusted Data
A service console interface on openPDC and openHistorian deserializes a client-supplied data structure. On systems using Windows Authentication, an attacker must already be authenticated to reach this function; on systems without Windows Authentication, this is reachable by an unauthenticated...
Exploit for Argument Injection in H2Database H2
H2 Database Console JDBC URL RCE CVE-2022-23221 Vulhubht...
Exploit for CVE-2020-14882
Oracle WebLogic Console Pre-Auth RCE CVE-2020-14882, CVE-2020...
389-ds-base: 389-ds-base: Command injection via unescaped LDAP DN in Cockpit 389 Console LDAP editor
A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name DN into a shell command string without proper escaping. An LDAP user with delegated privileges to create or rename directory entries could craft ...
CVE-2026-107583 Inefficient Algorithmic Complexity in hMailServer
Inefficient algorithmic complexity in the webmail's message view of the REST API in Progressive Robot hMailServer 6.3.2 through 6.3.5 allows a remote unauthenticated attacker to make the webmail, the administration console and the REST API unavailable by sending a message. The route that renders ...
Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.11.2 release.
Red Hat Web Terminal Operator 1.11.2 has been released. The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed...
CVE-2026-102258
Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...
CVE-2026-102257
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...
CVE-2026-102258
A post-authentication Stored Cross-Site Scripting (XSS) vulnerability exists in the SonicWall SMA1000 appliance's Management Console (AMC) . Under specific conditions, a remote authenticated attacker with administrator privileges can store and execute arbitrary JavaScript code within the AMC. Thi...
CVE-2026-102258
Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...
CVE-2026-102258
Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...
EUVD-2026-94327
Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...
CVE-2026-102257
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...
CVE-2026-102257
The SonicWall SMA1000 appliance is affected by a Zip Slip vulnerability (CWE-22) within the Appliance Management Console (AMC) interface. A post-authentication attacker can use a specially crafted archive to extract files outside the intended destination directory, leading to remote code executio...
CVE-2026-102257
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...
EUVD-2026-94326
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...
[SECURITY] Fedora 44 Update: cockpit-368-1.fc44
The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...
CVE-2026-102258: Improper Neutralization of Input During Web Page Generation
Post-authentication Stored Cross-Site Scripting XSS vulnerability has been identified in the SMA1000 Appliance Management Console AMC which in specific conditions could potentially enable a remote authenticated attacker as administrator to store and potentially execute arbitrary JavaScript code i...
CVE-2026-102257: Improper Limitation of a Pathname to a Restricted Directory
A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console AMC interface allows an attacker to extract files outside the intended destination directory using a specially crafted archive, resulting in remote code execution...
PT-2026-107505
Name of the Vulnerable Software and Affected Versions SMA1000 affected versions not specified Description A post-authentication Stored Cross-Site Scripting XSS issue exists in the Appliance Management Console AMC. This allows a remote authenticated attacker with administrator privileges to store...