10270 matches found
CVE-2023-37739---Path-Traversal-in-i-doit-Pro-25-and-below
CVE-2023-37739 - Path Traversal in i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to Path Traversal vulnerability. These vulnerabilities could allows remote authenticated attackers low or high privilege to navigate to locations that should not be accessible to the user.it can be...
CVE-2025-39436
🚨 WordPress Plugin Exploit: CVE-2025-39436 📝 Description An Unrestricted Upload of File with Dangerous Type vulnerability exists in the "I Draw" WordPress plugin. This exploit allows attackers to upload malicious files without restriction. The issue impacts I Draw versions up to 1.0. 🛠️ Exploit...
Linux Distros Unpatched Vulnerability : CVE-2026-97952
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sunvdc: unmap LDC cookies when the descriptor send fails sendrequest maps the request's pages into the LDC channel's map table ldcmapsg, fills in the descriptor...
Security Bulletin: IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service [CVE-2026-84414]
Summary IBM i is vulnerable to allowing a local authenticated attacker to change the ownership of certain files due to running with excessive permissions CVE-2026-84414 in Network Authentication Service NAS as described in the vulnerability details section. Vulnerability Details...
Security Bulletin: IBM i is Affected By a Cross-Site Scripting Vulnerability in Navigator for i [CVE-2026-75838]
Summary IBM Navigator for i uses DOMPurify for HTML sanitization. DOMPurify is vulnerable to cross-site scripting due to failure to neutralize detached subtrees in element-removal hooks CVE-2026-75838 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-75838...
Security Bulletin: HttpClient based on the classic i/o model fails to correctly release the underlying connection
Summary HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message. Please note this defect does not affect HttpClient based on the...
org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak
A flaw was found in Apache HttpComponents Client, specifically in its classic input/output I/O model. When processing a response message with an invalid or unsupported Content-Encoding header, the client fails to properly release the underlying network connection. This connection leak can lead to...
kernel: fbcon: Set fb_display[i]->mode to NULL when the mode is released
A use-after-free vulnerability was identified in the Linux kernel framebuffer console fbcon subsystem. During framebuffer unregistration, the kernel freed the memory for a display mode but did not clear the corresponding fbdisplayi-mode pointer. Subsequent framebuffer ioctl operations could then...
CVE-2026-97472
In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: fix temp address generation after prefix deprecation When a router temporarily deprecates an IPv6 prefix either by sending a Router Advertisement with Preferred Lifetime = 0 or by letting the lifetime expire and...
Security Bulletin: IBM Db2 Mirror for i is vulnerable to obtain sensitive information [CVE-2026-18104]
Summary IBM Db2 Mirror for i is vulnerable to obtaining sensitive information CVE-2026-18104 as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18104 DESCRIPTION: IBM i could allow a local attacker to obtain sensitive information due to the use of the AES...
CVE-2026-18104
IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...
CVE-2026-18104 IBM Db2 Mirror for i is vulnerable to obtain sensitive information []
IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...
CVE-2026-18104 IBM Db2 Mirror for i is vulnerable to obtain sensitive information []
IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...
EUVD-2026-85892
IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...
CVE-2026-18104
IBM Db2 Mirror for i versions 7.6, 7.5, and 7.4 are vulnerable to the disclosure of sensitive information. The root cause is the use of the AES Electronic Codebook (ECB) mode for encryption, which is considered a broken or risky cryptographic algorithm (CWE-327 ). This issue allows a local attack...
CVE-2026-18104: Use of a Broken or Risky Cryptographic Algorithm
IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook ECB mode for encryption...
PT-2026-97811
Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A local attacker could obtain sensitive information because the software uses AES Electronic Codebook ECB mode for encryption. ECB is a block cipher mode that encrypts identical blocks ...
CVE-2026-19438
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876...
CVE-2026-19438 Mint Workbench I Path traversal Vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876...