256231 matches found
CVE-2026-63042
Apache InLong (versions 2.0.0 through 2.3.x) is vulnerable to a flaw where any authenticated manager user can create, modify, or delete Data Node definitions . This missing authorization on management endpoints can lead to files or directories becoming accessible to external parties. To remediate...
CVE-2026-63037
An unauthenticated SQL injection vulnerability exists in the Apache InLong Manager backend database, specifically affecting versions 2.0.0 through 2.3.x . The root cause is the improper neutralization of special elements used in an SQL command within the ORDER BY clause of the Manager OpenAPI aud...
EUVD-2026-63398
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache InLong. This appears to allow SQL injection in the ORDER BY clause against the Manager backend database. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgra...
CVE-2026-63037 Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache InLong. This appears to allow SQL injection in the ORDER BY clause against the Manager backend database. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgra...
CVE-2026-63037 Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache InLong. This appears to allow SQL injection in the ORDER BY clause against the Manager backend database. This issue affects Apache InLong: from 2.0.0 before 2.4.0. Users are advised to upgra...
Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions
Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed in IBM Business Automation Manager Open Editions 9.5.2 Vulnerability Details CVEID:CVE-2026-62389 DESCRIPTION: Rejected reason: This CVE ID has been rejected or withdrawn b...
Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server and WebSphere Application Server Liberty shipped with IBM Guardium Key Lifecycle Manager (GKLM)
Summary WebSphere Application Server and WebSphere Application Server Liberty is shipped as a component of IBM Guardium Key Lifecycle Manager GKLM. Information about security vulnerabilities affecting WebSphere Application Server and WebSphere Application Server Liberty has been published in a...
Azure Data Manager for Energy Remote Code Execution Vulnerability
Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network...
Exploit for Path Traversal in F5 Big-Ip_Access_Policy_Manager
IDS Deployment & Packet Analysis Network intrusion detectio...
WordPress Vitepos Lite plugin < 3.5.0 - Outlet Manager+ Privilege Escalation vulnerability
Outlet Manager+ Privilege Escalation vulnerability discovered by RealKingEngine ISAL FRAMEWORK in WordPress Plugin Vitepos versions 3.6.0...
WordPress Vitepos plugin < 3.6.0 - Outlet Manager+ Privilege Escalation vulnerability
Outlet Manager+ Privilege Escalation vulnerability discovered by RealKingEngine ISAL FRAMEWORK in WordPress Plugin Vitepos versions 3.6.0...
WordPress WP Events Manager plugin < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter vulnerability
Subscriber+ Payment Bypass via 'qty' Parameter vulnerability discovered by Mustafa Ahmed in WordPress Plugin WP Events Manager versions 2.2.5...
Johnson Controls Simplex Incident Manager
ADVISORY SUMMARY Successful exploitation of this vulnerability could allow a local attacker with low privileges to extract user credentials passwords and authentication tokens from system memory, potentially leading to unauthorized access to the application and connected systems. 2. RECOMMENDED...
WinObjEx64 v2.1.1
WinObjEx64 Windows Object Explorer 64-bit WinObjEx64 is an advanced utility that lets you explore the Windows Object Manager namespace. For certain object types, you can double-click on it or use the "Properties..." toolbar button to get more information, such as description, attributes, resource...
GO-2026-6107 vulnerabilities
Vulnerabilities for packages: reports-server, dapr, kyverno, multicluster-controlplane-fips, kots, cert-manager, commercial-grafana, kube-conformance, cilium, cilium-cli, hubble, kubernetes, loki, milvus, external-dns, minio, multicluster-controlplane, rancher-support-bundle-kit, kine...
GO-2026-6107 vulnerabilities
Vulnerabilities for packages: kine, kyverno, cilium-cli, hubble, kots, cert-manager, kubernetes, dapr, loki, cilium, minio, external-dns...
GHSA-6VCH-Q96H-7GC3 vulnerabilities
Vulnerabilities for packages: kine, kyverno, cilium-cli, hubble, kots, cert-manager, kubernetes, dapr, loki, cilium, minio, external-dns...
CVE-2026-73500 vulnerabilities
Vulnerabilities for packages: kine, kyverno, cilium-cli, hubble, kots, cert-manager, kubernetes, dapr, loki, cilium, minio, external-dns...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: tekton-chains, telegraf, rke2-cloud-provider, yunikorn-k8shim, cert-manager, cluster-api-provider-vsphere, grafana, cloud-provider-aws, hubble-ui, kyverno-notation-aws, kube-metrics-adapter, kapp-controller, kubernetes-csi-external-health-monitor, cluster-api,...
