3010 matches found
Pterodactyl Panel - Remote Code Execution
Pterodactyl is a free, open-source game server management panel. Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. id: CVE-2025-49132 info: name: Pterodactyl Panel - Remote Code Execution...
CVE-2026-84893 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 is vulnerable to SQL injection in the PESI service. An authenticated attacker could exploit this vulnerability to access sensitive information in the internal database...
EUVD-2026-74640
Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information...
CVE-2026-21105: Improper Access Control
Improper access control in Collection prior to version 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16 allows local attackers to access sensitive information...
CVE-2026-73787: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the CPPM web interface could allow an authenticated remote attacker to access directory information on a vulnerable system. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system...
Dell iDRAC9 7.0.x < 7.00.00.182 / 7.20.x < 7.20.30.50 Improper Access Control (DSA-2026-374)
The version of Dell Integrated Remote Access Controller 9 iDRAC9 running on the remote host is 7.0.x prior to 7.00.00.182, or 7.20.x prior to 7.20.30.50. It is, therefore, affected by an improper access control vulnerability. A remote attacker with low privileges could potentially exploit this...
CVE-2026-73727: Incorrect Authorization
Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access sensitive information. A successful exploit allows an attacker to access data beyond what is authorized by the user's existing privilege level, which could be used to...
CVE-2026-18891
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary flows and access sensitive information due to improper authentication...
CVE-2026-18891: Improper Authentication
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary flows and access sensitive information due to improper authentication...
BIT-GITLAB-2026-6267 Insertion of Sensitive Information Into Sent Data in GitLab
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with Developer role to access unauthorized information due to insufficient access...
PT-2026-73301
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an authenticated user with Developer role to access unauthorized information due to insufficient access...
CVE-2026-21076: Incorrect Authorization
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
CVE-2026-21084: Improper Access Control
Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information...
CVE-2026-21070: Improper Input Validation
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...
CVE-2026-21081: Improper Export of Android Application Components
Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...
CVE-2026-21077: Incorrect Authorization
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
The vulnerability of Cisco IOS XE operating systems, related to insufficient control over resources during their existence, allows attackers to compromise the accessibility of protected information.
The vulnerability of Cisco IOS XE operating systems is related to insufficient control over resources during their existence. Exploiting this vulnerability can allow a malicious actor to compromise the accessibility of protected information...
CVE-2026-68585
SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that returns document root metadata including title for publish-forbidden documents without publish-access checks. Anonymous readers or publish RoleReader tokens can supply a block ID...
EUVD-2026-52074
In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11086431; Issue ID: MSV-8189...