65348 matches found
CVE-2026-20313
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...
CVE-2026-20313 Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...
GHSA-V3J7-R9GQ-3GJW
creationtimestamp| type| source ---|---|--- 2026-08-05 16:31:30+00:00| seen| https://gist.github.com/alon710/833f29b9d380bcf059ea629581974a6e...
EUVD-2026-53471
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...
CVE-2026-20310
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...
CVE-2026-20310 Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...
CVE-2026-20310
Cisco Catalyst SD-WAN software contains CVE-2026-20310 addressing improper link resolution before file access (CWE-59). Affected component: Cisco Catalyst SD-WAN software; root cause: improper link resolution before file access. Impact per CVSS: Critical (9.1) with high confidentiality, integrity...
EUVD-2026-53448
A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An...
CVE-2026-9195
A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticated administrator to a crafted URL to execute arbitrary JavaScript in the administrator's browser session, capture credentials, and perfo...
CVE-2026-15656
IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the...
GHSA-7PGQ-CR25-XVC8
creationtimestamp| type| source ---|---|--- 2026-08-05 16:00:04+00:00| published-proof-of-concept| https://t.me/bdufstecru/3364 2026-08-06 00:00:34+00:00| published-proof-of-concept| https://t.me/bdufstecru/3364...
CVE-2026-9195
Progress MarkLogic Server Query Console is affected by a cross-site scripting (XSS) vulnerability in versions before 11.3.6 and 12.0.3. The issue allows a remote attacker to lure an authenticated administrator to a crafted URL, enabling arbitrary JavaScript execution in the administrator’s browse...
EUVD-2026-53397
Insufficient Verification of Data Authenticity vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.1. A missing authorization check in the external-login email binding flow allows unauthenticated attackers to take over arbitrary user accounts by tricking victims into...
CVE-2026-48911
CVE-2026-48911 describes an Insufficient Verification of Data Authenticity in Apache Answer (affected up to 2.0.1). The vulnerability arises from a missing authorization check in the external-login email binding flow, enabling unauthenticated attackers to take over arbitrary user accounts by guid...
CVE-2026-71269
creationtimestamp| type| source ---|---|--- 2026-08-05 15:08:37+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117043528766793055...
CVE-2026-71278
creationtimestamp| type| source ---|---|--- 2026-08-05 15:02:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdsay4d2z2h...
CVE-2026-16442
CVE-2026-16442 affects Keycloak’s SAML broker component. The IdP-initiated SSO endpoint fails to enforce whether a provider is restricted to account linking, allowing an attacker with control of a linked upstream identity to bypass login restrictions and gain full access to a local user account. ...
CVE-2026-71268
creationtimestamp| type| source ---|---|--- 2026-08-05 14:58:17+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msdrzssxzv22...