1207 matches found
CVE-2026-95766
Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to disclose sensitive information...
EUVD-2026-116183
Sensitive information disclosure vulnerabilities in HPE Networking Fabric Composer could allow an authenticated attacker with low privileges to access sensitive information. Successful exploitation could allow an attacker to disclose sensitive information...
CVE-2026-95759
Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer . An authenticated attacker with low privileges could successfully exploit this vulnerability to suppress audit records of their activity on the affected system. No specific details regarding the root cause or rem...
EUVD-2026-116176
Audit log bypass vulnerabilities exist in the API of HPE Networking Fabric Composer. Successful exploitation could allow an authenticated attacker with low privileges to suppress the audit records of their activity on the affected system...
openjdk: Enhance Image Handling (Oracle CPU 2026-10)
A flaw was found in OpenJDK's Abstract Window Toolkit AWT. A remote attacker with low privileges could exploit this vulnerability by convincing a user to run untrusted code within a sandboxed environment. Successful exploitation allows unauthorized read access to a subset of accessible data,...
openjdk: Enhance Image Handling (Oracle CPU 2026-10)
A flaw was found in OpenJDK's Abstract Window Toolkit AWT. A remote attacker with low privileges could exploit this vulnerability by convincing a user to run untrusted code within a sandboxed environment. Successful exploitation allows unauthorized read access to a subset of accessible data,...
CVE-2025-29093-Arbitrary-File-Upload
CVE-2025-29093-Arbitrary-File-Upload This repository reveals a security vulnerability discovered in Motivian Content Management System v.41.0.0. CVE-2025-29093: Arbitrary File Upload This vulnerability was reported to the vendor in accordance with responsible disclosure practices, and to MITRE,...
openjdk: Enhance Image Handling (Oracle CPU 2026-10)
A flaw was found in OpenJDK's Abstract Window Toolkit AWT. A remote attacker with low privileges could exploit this vulnerability by convincing a user to run untrusted code within a sandboxed environment. Successful exploitation allows unauthorized read access to a subset of accessible data,...
openjdk: Enhance Image Handling (Oracle CPU 2026-10)
A flaw was found in OpenJDK's Abstract Window Toolkit AWT. A remote attacker with low privileges could exploit this vulnerability by convincing a user to run untrusted code within a sandboxed environment. Successful exploitation allows unauthorized read access to a subset of accessible data,...
openjdk: Enhance Image Handling (Oracle CPU 2026-10)
A flaw was found in OpenJDK's Abstract Window Toolkit AWT. A remote attacker with low privileges could exploit this vulnerability by convincing a user to run untrusted code within a sandboxed environment. Successful exploitation allows unauthorized read access to a subset of accessible data,...
CVE-2026-118038
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to...
CVE-2026-118038
Progress Telerik Document Processing Libraries prior to version 2026.3.1027 are affected by a path traversal vulnerability in the Convert and Merge AI agent tools . An authenticated attacker with low privileges can supply tool arguments containing relative file paths that resolve against the proc...
EUVD-2026-112034
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to...
PT-2026-128220
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to...
Dell PowerProtect Data Domain Management Center authorization issue vulnerability
Versions 7.7.1.0 through 8.8, 7.13.1.0 through 7.13.1.80, 8.3.1.0 through 8.3.1.40, and 8.6.1.0 through 8.6.1.20 of Dell PowerProtect Data Domain Management Center contain an authorization issue vulnerability. This vulnerability stems from a lack of authorization checks and may allow remote...
Dell PowerProtect Data Domain path traversal vulnerability
Versions 7.7.1.0 through 8.8 of Dell PowerProtect Data Domain, versions 7.13.1.0 through 7.13.1.80 of LTS2024, versions 8.3.1.0 through 8.3.1.40 of LTS2025, and versions 8.6.1.0 through 8.6.1.20 of LTS2026 contain a path traversal vulnerability. This vulnerability stems from improper restrictions...
Domoticz path traversal vulnerability
Domoticz versions 2026.2 and earlier contain a security vulnerability. This vulnerability arises because the udevices JSON command handler fails to verify the session.rights permission before invoking Lua parsing scripts; additionally, the script parameter lacks path traversal protection. As a...
openjdk: Enhance Image Handling (Oracle CPU 2026-10)
A flaw was found in OpenJDK's Abstract Window Toolkit AWT. A remote attacker with low privileges could exploit this vulnerability by convincing a user to run untrusted code within a sandboxed environment. Successful exploitation allows unauthorized read access to a subset of accessible data,...
CVE-2026-101755
A flaw was found in MySQL client programs. An authenticated attacker with network access and low privileges could exploit this vulnerability across multiple protocols. A successful attack allows the threat actor to cause an application hang or repeated crash, resulting in a complete Denial of...
Vulnerabilities in Oracle JD Edwards EnterpriseOne
Oracle has identified several vulnerabilities in Oracle JD Edwards EnterpriseOne Tools, specifically in versions 9.2.0.0 through 9.2.26.5. These vulnerabilities allow attackers to gain access to the system using various network protocols such as HTTP, HTTPS, and SMTP, either without authenticatio...