16643 matches found
CVE-2026-92930
OpenEye Apex Network Video Recorder NVR firmware 3.2.9.376 uses an administrator password-reset unlock-code design that lacks a per-device secret or other server-side cryptographic material. An attacker with physical-console access and access to the privileged password-reset workflow can forge a...
Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.16.2 release.
Red Hat Web Terminal Operator 1.16.2 has been released. The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed...
Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.17.1 release.
Red Hat Web Terminal Operator 1.17.1 has been released. The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed...
Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.15.2 release.
Red Hat Web Terminal Operator 1.15.2 has been released. The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed...
Important: Red Hat Security Advisory: Red Hat Web Terminal Operator 1.14.1 release.
Red Hat Web Terminal Operator 1.14.1 has been released. The Web Terminal provides a way to access a fully in-browser terminal emulator within the OpenShift Console. Command-line tools for interacting with the OpenShift cluster are pre-installed...
PT-2026-97113
Name of the Vulnerable Software and Affected Versions OpenEye Apex Network Video Recorder NVR versions 2.2.3.4 through 3.2.9.376 Description The administrator password-reset unlock-code design lacks a per-device secret or server-side cryptographic material. An attacker with physical-console acces...
SUSE CVE-2026-90337
In the Linux kernel, the following vulnerability has been resolved: serial: core: do fallible allocations before the console can be registered serialcoreaddoneport allocates uport-ttygroups after uartconfigureport, which may register the console. If the allocation fails, the driver unwinds the po...
EUVD-2026-83454
A flaw was found in the OpenShift console. Unauthenticated access to the /api/devfile/ and /api/devfile/samples/ endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery SSRF, where the console pod makes requests to internal services and...
CVE-2026-15660: Missing Authorization
The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.4.7. This is due to a missing capability check on the handleoauthcallback function which is hooked to admininit and processes $GET'accesstoken' and $GET'googleemail' without verifying t...
CVE-2026-75885
A flaw was found in the OpenShift console. Unauthenticated access to the /api/devfile/ and /api/devfile/samples/ endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery SSRF, where the console pod makes requests to internal services and...
CVE-2026-75885 Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint
A flaw was found in the OpenShift console. Unauthenticated access to the /api/devfile/ and /api/devfile/samples/ endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery SSRF, where the console pod makes requests to internal services and...
CVE-2026-75885
A flaw in the OpenShift console allows unauthenticated remote attackers to exploit the /api/devfile/ and /api/devfile/samples/ endpoints. Two distinct impacts are possible: Server-Side Request Forgery (SSRF) , where the console pod makes requests to internal services and reflects partial response...
CVE-2026-75885
A flaw was found in the OpenShift console. Unauthenticated access to the "/api/devfile/" and "/api/devfile/samples/" endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery SSRF, where the console pod makes requests to internal services an...
CVE-2026-75885 Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint
A flaw was found in the OpenShift console. Unauthenticated access to the /api/devfile/ and /api/devfile/samples/ endpoints allows a remote attacker to send crafted devfile payloads. This can lead to Server-Side Request Forgery SSRF, where the console pod makes requests to internal services and...
CVE-2026-11545
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...
CVE-2026-11545 IBM WebSphere Application Server is affected by a privilege escalation
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...
CVE-2026-11545 IBM WebSphere Application Server is affected by a privilege escalation
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...
CVE-2026-11545
IBM WebSphere Application Server versions 8.5.5.0–8.5.5.29 and 9.0.0.0–9.0.5.28 are affected by a privilege escalation due to missing authorization checks in the administrative console, allowing a remote unauthenticated attacker to obtain sensitive information. CVSS 3.1 score is 3.7 (Low) with hi...