Lucene search
+L

7841 matches found

CVE
CVE
added 2026/09/15 3:37 p.m.52 views

CVE-2026-55864

GeoNetwork is a catalog application for managing spatially referenced resources. An unauthenticated Server-Side Request Forgery (SSRF) exists in the SLD tooling endpoint POST /api/tools/ogc/sld, which accepted a caller-supplied WMS server URL and performed a server-side HTTP GET with no destinati...

7.8CVSS5.6AI score0.00587EPSS
SaveExploits0References7
OSV
OSV
added 2026/09/15 3:37 p.m.4 views

CVE-2026-55864 GeoNetwork: Unauthenticaded Server-Side Request Forgery in SLD Tool

GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server...

7.8CVSS5.6AI score
SaveExploits0References9
CVE
CVE
added 2026/09/15 2:58 p.m.34 views

CVE-2026-55178

GeoLens is a self-hosted geospatial data catalog with semantic search, OGC/STAC APIs, and a map builder. Prior to 1.2.3 , multiple read and link endpoints authorized only the resource named in the request URL but failed to re-authorize a second caller-influenced dataset reached through a relation...

7.5CVSS5.7AI score0.00368EPSS
SaveExploits0References12
NVD
NVD
added 2026/09/15 10:17 a.m.3 views

CVE-2026-44202

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the /sessionservice addSessionListener operation allows an authenticated user to register an arbitrary notification URL without requiring an administrative or application client token. SessionRequestHandler passes th...

5.3CVSS0.00317EPSS
SaveExploits0References3
CVE
CVE
added 2026/09/15 9:47 a.m.35 views

CVE-2026-44202

OpenAM (Open Identity Platform), an open-source IAM platform derived from ForgeRock, has an authenticated SSRF vulnerability in the /sessionservice addSessionListener operation. Prior to 16.1.1 , an authenticated user can register an arbitrary notification URL without requiring an administrative ...

5.3CVSS5.8AI score0.00317EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/09/15 9:47 a.m.23 views

CVE-2026-44202 OpenAM Authenticated Server-Side Request Forgery (SSRF) via `/sessionservice`

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the /sessionservice addSessionListener operation allows an authenticated user to register an arbitrary notification URL without requiring an administrative or application client token. SessionRequestHandler passes th...

5.3CVSS0.00317EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/15 8:36 a.m.5 views

CVE-2026-91846 MISP Collection Element Add Missing Authorization on Referenced Object UUID

Affected versions of MISP allow a collection element to be created from a bare UUID without consistently checking whether the acting user is allowed to access the referenced object. The commit explains that collection elements themselves only store UUIDs, while the collection view later resolves...

7.1CVSS5.7AI score
SaveExploits0References4
CVE
CVE
added 2026/09/15 8:36 a.m.10 views

CVE-2026-91846

MISP (≤2.5.45) contains a missing authorization check when adding collection elements from a bare UUID. Because collection elements only store UUIDs that are resolved later by the collection view, the generic add() path could persist a UUID for an Event or Galaxy Cluster that the acting user coul...

7.1CVSS5.7AI score0.00207EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/09/15 8:36 a.m.26 views

CVE-2026-91846 MISP Collection Element Add Missing Authorization on Referenced Object UUID

Affected versions of MISP allow a collection element to be created from a bare UUID without consistently checking whether the acting user is allowed to access the referenced object. The commit explains that collection elements themselves only store UUIDs, while the collection view later resolves...

7.1CVSS0.00207EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/09/15 4:57 a.m.7 views

CVE-2026-15789

A flaw was found in BuildKit. A custom client with valid permissions to access the BuildKit control API can produce an upload request that allows files to escape from the BuildKit-controlled state directory. This could lead to unauthorized modification or disclosure of sensitive data...

7.5CVSS5.7AI score0.00314EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/14 8:50 p.m.6 views

EUVD-2026-77885

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. A local app may be able to read a persistent account identifier...

5.7AI score0.00195EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/14 7:48 p.m.8 views

EUVD-2026-77794

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage PxXMLInput operator could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection...

7.7CVSS5.8AI score0.00343EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/09/14 6:17 p.m.7 views

EUVD-2026-77760

ThemeAtelier Domain For Sale plugin for WordPress before 3.5.2 contains a missing authorization vulnerability in its REST API endpoints that allows unauthenticated attackers to access and manipulate protected resources. Attackers can retrieve stored offer records, delete arbitrary offers by numer...

8.8CVSS5.9AI score0.00232EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 6:00 p.m.9 views

CVE-2021-2471

CVE-2021-2471 - XXE en MySQL Connector/J Vulnerabilidad en el producto MySQL Connectors de Oracle MySQL componente: Connector/J. Las versiones compatibles afectadas son 8.0.26 y anteriores. Los ataques exitosos de esta vulnerabilidad pueden resultar en acceso no autorizado a datos críticos o acce...

7.9CVSS7.1AI score0.07493EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/09/14 4:43 p.m.8 views

CVE-2026-88030

A flaw was found in the GridFS component of the MongoDB Ruby Driver. Improper neutralization of special elements in data query logic can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than a literal identifier. An authenticated user who can...

8.3CVSS5.7AI score0.00259EPSS
SaveExploits0References4
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.6 views

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

A flaw was discovered in the Netfilter subsystem of the Linux kernel. The sctpmtcheck function did not validate the flagcount field properly. This flaw allows a local privileged CAPNETADMIN attacker to trigger an out-of-bounds read, resulting in a system crash or the disclosure of sensitive...

6.1CVSS6.4AI score0.00415EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.10 views

Astra Linux – Vulnerability in WebKit2GTK

A cookie management issue has been resolved through improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Big Sur 11.6.5. Processing maliciously crafted web content may disclose sensitive user information...

6.5CVSS6.6AI score0.01389EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:01 p.m.5 views

Astra Linux – Vulnerability in Intel Microcode

The exposure of sensitive information due to shared microarchitectural predictor states, which affect transient execution in the indirect branch predictors of certain Intel processors, may allow an authenticated user to potentially disclose information through local access...

5.7CVSS6.9AI score0.00268EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/14 10:00 a.m.6 views

EUVD-2026-77355

Incorrect Authorization vulnerability in Apache Doris allows an authenticated user to bypass privilege checks and access data they are not authorized to read, resulting in unauthorized disclosure of information. This issue affects Apache Doris: from 2.0.0 through 2.1., from 3.0.0 through 3.0., fr...

6.5CVSS5.8AI score0.00382EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/14 10:00 a.m.13 views

CVE-2026-68570

Apache Doris is affected by an Incorrect Authorization vulnerability that allows an authenticated user to bypass privilege checks and read data they are not authorized to access, resulting in unauthorized information disclosure . Affected versions span 2.0.0 through 2.1.* , 3.0.0 through 3.0.* , ...

6.5CVSS5.8AI score0.00382EPSS
SaveExploits0References2
Rows per page
Query Builder