4823 matches found
CVE-2026-126196
The pgEdge Postgres MCP Server (prior to version 1.1.0 ) contains a vulnerability where the read_only mode can be bypassed via SQL statement smuggling through the query_database function. The root cause is that pgx Exec (without bind parameters) may select PostgreSQL's simple query protocol, allo...
CVE-2026-126644
A link-following flaw was found in the authorizedkey module of the ansible.posix collection, residual to the fix for CVE-2026-11837. That fix guards only the final path component os.chown with followsymlinks=False and ONOFOLLOW in safeopenwrite. When an unprivileged local user replaces their /.ss...
EUVD-2026-124343
A link-following flaw was found in the authorizedkey module of the ansible.posix collection, residual to the fix for CVE-2026-11837. That fix guards only the final path component os.chown with followsymlinks=False and ONOFOLLOW in safeopenwrite. When an unprivileged local user replaces their /.ss...
CVE-2026-126644
A link-following flaw exists in the authorized_key module of the ansible.posix collection. This vulnerability is residual to the fix for CVE-2026-11837 because the existing fix only guards the final path component. An unprivileged local user can replace their ~/.ssh directory with a symlink to a ...
CVE-2025-0108-SCAN
CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS...
PT-2026-145904
pgEdge Postgres MCP Server enables SQL queries against PostgreSQL databases through Model Context Protocol compatible clients. Prior to 1.1.0, query database on a read only connection could send unrecognized statements through pgx Exec without bind parameters, selecting PostgreSQL's simple query...
nodejs: Node.js: Local server can be started without network permission via Permission API flaw
A flaw was found in Node.js. The Node.js Permission API can allow a local server to be started through a Unix domain socket, even when the --allow-net permission is not explicitly granted. This bypasses intended security restrictions, potentially leading to unintended local network exposure or...
expat: Expat: XML Injection via Malformed UTF-16 Input
A flaw was found in Expat. This vulnerability allows a remote attacker to send specially crafted UTF-16 encoded XML data. Due to improper validation of surrogate characters, the parser can be tricked into accepting malformed sequences, which can hide legitimate markup characters. This could enabl...
nodejs: Node.js: Local server can be started without network permission via Permission API flaw
A flaw was found in Node.js. The Node.js Permission API can allow a local server to be started through a Unix domain socket, even when the --allow-net permission is not explicitly granted. This bypasses intended security restrictions, potentially leading to unintended local network exposure or...
CVE-2026-40433
Heap-based buffer overflow for some IntelR PROSet Wireless Wi-Fi Software for Windows within Ring 0: Kernel may allow a denial of service. Network adversary with an unauthenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...
CVE-2026-89131
SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request forgery. An unauthenticated attacker could craft a malicious link that, when clicked by an authenticated user, triggers an unintended action on the server. Successful exploitation...
CVE-2026-120014
SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality. In the context of SAP HANA XSA Web Dispatcher, an unauthenticated attacker could trick a logged-on administrator into visiting a malicious link. Visiting the link could cause...
CVE-2026-109809
SAP NetWeaver Application Server Java NWDI Cockpit does not perform sufficient authorization checks for certain functionality before processing the requests. An attacker with low privileges could exploit this to perform unauthorized modifications. Successful exploitation results in high impact on...
CVE-2026-109811
An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform Application Server ABAP has SSRF vulnerability due to insecure default settings. An authenticated attacker with low privileges could trick the victim to interact with a malicious server which allows the attacker to access sensitiv...
CVE-2026-120014
The SAP HANA XSA Web Dispatcher is vulnerable to a Cross-Site Request Forgery (CSRF) flaw due to insufficient request validation in certain administrative functionalities. An unauthenticated attacker can trick a logged-on administrator into visiting a malicious link, causing unintended actions wi...
EUVD-2026-120697
SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality. In the context of SAP HANA XSA Web Dispatcher, an unauthenticated attacker could trick a logged-on administrator into visiting a malicious link. Visiting the link could cause...
CVE-2026-120014 Cross-Site Request Forgery (CSRF) vulnerability in SAP Web Dispatcher and Internet Communication Manager
SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality. In the context of SAP HANA XSA Web Dispatcher, an unauthenticated attacker could trick a logged-on administrator into visiting a malicious link. Visiting the link could cause...
EUVD-2026-120693
An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform Application Server ABAP has SSRF vulnerability due to insecure default settings. An authenticated attacker with low privileges could trick the victim to interact with a malicious server which allows the attacker to access sensitiv...
EUVD-2026-120691
SAP NetWeaver Application Server Java NWDI Cockpit does not perform sufficient authorization checks for certain functionality before processing the requests. An attacker with low privileges could exploit this to perform unauthorized modifications. Successful exploitation results in high impact on...
CVE-2026-109809 Security Vulnerabilities SAP NetWeaver Application Server Java (NWDI Cockpit)
SAP NetWeaver Application Server Java NWDI Cockpit does not perform sufficient authorization checks for certain functionality before processing the requests. An attacker with low privileges could exploit this to perform unauthorized modifications. Successful exploitation results in high impact on...