235800 matches found
CVE-2026-79905
Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). A low-privileged attacker can inject malicious scripts into vulnerable form fields; when a victim browses the affected page, the injected JavaScript executes in the victim's browser. The vulnerabil...
EUVD-2026-74075
In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager IdM deployment included insecure default configurations and credentials for security-sensitive services. The Helm chart exposed the Keycloak service and its PostgreSQL...
CVE-2026-86464
In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager IdM deployment included insecure default configurations and credentials for security-sensitive services. The Helm chart exposed the Keycloak service and its PostgreSQL...
CVE-2026-86464
Eclipse aeriOS Identity Manager (IdM) — in its current development version (no official release published yet) — shipped insecure default configurations in both its Helm chart and Docker Compose deployments. Keycloak and its PostgreSQL backing database were exposed via Kubernetes NodePort service...
CVE-2026-86464
In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager IdM deployment included insecure default configurations and credentials for security-sensitive services. The Helm chart exposed the Keycloak service and its PostgreSQL...
CVE-2026-86804
A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controller/proxy/handler.go of the component HTTP Handler. The manipulation leads to improper authorization. It is possible to...
CVE-2026-86804 seakee CPA-Manager-Plus HTTP handler.go CPAResource improper authorization
A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controller/proxy/handler.go of the component HTTP Handler. The manipulation leads to improper authorization. It is possible to...
EUVD-2026-74049
A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controller/proxy/handler.go of the component HTTP Handler. The manipulation leads to improper authorization. It is possible to...
CVE-2026-86804
An improper authorization vulnerability in seakee CPA-Manager-Plus versions up to 1.11.10 affects the CPAResource function in the file apps/manager-server/internal/http/controller/proxy/handler.go within the HTTP Handler component. An unauthenticated remote attacker can manipulate this handler to...
CVE-2026-86804 seakee CPA-Manager-Plus HTTP handler.go CPAResource improper authorization
A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. This vulnerability affects the function CPAResource of the file apps/manager-server/internal/http/controller/proxy/handler.go of the component HTTP Handler. The manipulation leads to improper authorization. It is possible to...
WordPress WPMR Google Feed Manager for WooCommerce – Sell on Google Merchant Center & Shopping plugin <= 2.23.7 - Authenticated (Administrator+) SQL Injection vulnerability
Authenticated Administrator+ SQL Injection vulnerability discovered by Wordfence PRISM in WordPress Plugin WooCommerce Google Feed Manager versions = 2.23.7...
CVE-2026-77904
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-77892
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-72966
Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally...
CVE-2026-72932
Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...
CVE-2026-71352
Integer underflow wrap or wraparound in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network...
CVE-2026-71343
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally...
CVE-2026-69771
Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...