63 matches found
CVE-2026-84249
IBM Guardium Data Protection versions 12.2 and 12.2.2 are affected by a CRITICAL vulnerability (CVSS 9.8) caused by missing authentication for critical functions (CWE-306). This flaw could allow a remote attacker to execute arbitrary management operations without any privileges or user interactio...
PT-2026-107699
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.3 Splunk Enterprise versions prior to 10.2.7 Splunk Enterprise versions prior to 10.0.10 Splunk Enterprise versions prior to 9.4.15 Description Improper input validation in the REST API allows a user wi...
PT-2026-95768
Name of the Vulnerable Software and Affected Versions Hydra Booking — Appointment Scheduling & Booking Calendar versions prior to 1.2.4 Description The plugin fails to perform object-level authorization checks on several host-management operations. This allows users assigned to a specific custom...
Security Bulletin: IBM Guardium Data Protection is affected by vulnerability (CVE-2026-84249)
Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2026-84249 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function...
CVE-2026-11921
IBM Verify Identity Access containers may not correctly apply management password change operations, leading to insufficiently protected credentials (CWE-522). This issue affects IBM Verify Identity Access (v11.0.0 - 11.0.3 IF1), IBM Security Verify Access (v10.0.0 - 10.0.9.2 IF1), and their resp...
EUVD-2026-78897
IBM Verify Identity Access containers may not apply management password change operations correctly...
PT-2026-92143
Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access containers affected versions not specified Description IBM Verify Identity Access containers may fail to correctly apply management password change operations. Recommendations At the moment, there is no information...
CVE-2026-11962
The FileOrganizer WordPress plugin before 1.2.0 does not validate the file type on several of its file-management operations, allowing authenticated users who have been granted file-manager access — which its premium add-on can extend to sub-administrator roles — to upload arbitrary PHP files and...
CVE-2026-42489 domctl lock open to abuse
This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. To create and manage guests, domctl operations are used by the control domain, a possible Xenstore domain, or by a domain controlling a particular guest. Some of these...
VMware Cloud Foundation Operations 安全漏洞
VMware Cloud Foundation Operations is a private cloud operations management platform provided by the American company VMware. There is a security vulnerability in VMware Cloud Foundation Operations. This vulnerability stems from multiple storage-based cross-site scripting vulnerabilities, which...
Acer M6E 安全漏洞
The Acer M6E is a portable 5G mobile hotspot device from Acer, a company based in Taiwan, China. The Acer M6E has a security vulnerability, which stems from public access rights that are not checked by the core Broadcast Receiver. This vulnerability may allow unauthorized local software component...
Nozomi Networks CMC和Nozomi Networks Guardian 安全漏洞
Nozomi Networks CMC and Nozomi Networks Guardian are both products of Nozomi Networks, a company based in the United States. Nozomi Networks CMC is a network management platform. Nozomi Networks Guardian is a security software. Both Nozomi Networks CMC and Nozomi Networks Guardian have security...
CVE-2026-4818 Some management operations on data streams are not properly restricted when user does not have the necessary privileges
In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data streams...
CVE-2026-4818
In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data streams...
CVE-2026-4818: Improper Authorization
In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations against data streams...
AWS VDP: Encryption context keys and values logged at INFO level
Component: cmd/server/main.go:101-106 Affected Version: aws-encryption-provider @ 4341c70 all versions Found by: Source audit TLP: TLP:Amber --- Summary The server startup code logs all encryption context key-value pairs at INFO level. Encryption context is metadata associated with KMS operations...
VMware Aria Operations 安全漏洞
VMware Aria Operations is a unified, AI-driven automated IT operations management platform provided by the American company VMware. It is suitable for private cloud, hybrid cloud, and multi-cloud environments. There is a security vulnerability in VMware Aria Operations, which stems from a...
Keylime 安全漏洞
Keylime is an open-source scalable trust system developed using TPM technology. Versions of Keylime 7.12.0 and earlier contain security vulnerabilities. These vulnerabilities stem from the lack of enforcement of client-side TLS authentication, which may allow unverified clients to execute...
GO-2025-4251 Ollama has missing authentication enabling attackers to perform model management operations in github.com/ollama/ollama
Ollama has missing authentication enabling attackers to perform model management operations in github.com/ollama/ollama...
