67126 matches found
CVE-2026-12503
Improper Link Resolution CWE-59 in /usr/bin/larmstarter in Loytec L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows an authenticated larmapp attacker to make /etc/passwd writable by the larmapp group leading to root privilege escalation via a symlink attack on...
CVE-2026-8789
The Easy Appointments WordPress plugin is vulnerable to unauthorized data modification via the ea_delete_multiple_connections AJAX action, due to a missing capability check and missing nonce verification in all versions up to 3.12.27. Authenticated attackers with Contributor-level access and abov...
OPENSUSE-SU-2026:21440-1 Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 July 2026 CPU - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. - CVE-2026-46917: partial denial of service via TLS bsc1272223. -...
CVE-2026-12654 Payment Plugins for Stripe WooCommerce <= 4.0.7 - Missing Authorization to Unauthenticated Arbitrary Order Status Modification via Empty Webhook Secret
The Payment Plugins for Stripe WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.0.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers ...
PT-2026-64422
Name of the Vulnerable Software and Affected Versions Weintek cMT3092X affected versions not specified Description The Weintek cMT3092X HMI contains a flaw where it relies on cookies without proper validation and integrity checking during security decisions. This allows a non-privileged user to...
PT-2026-64376
Name of the Vulnerable Software and Affected Versions sysPass versions prior to 3.2.12 Description A missing object-level authorization issue exists in the JSON-RPC API. This allows holders of API tokens to enumerate account metadata, overwrite passwords, and delete accounts across the entire...
PT-2026-64425
Name of the Vulnerable Software and Affected Versions Weintek cMT3092X affected versions not specified Description An incorrect permission assignment for critical resources in the Weintek cMT3092X HMI allows a non-privileged user to modify tokens to escalate privileges. Recommendations At the...
PT-2026-64423
Name of the Vulnerable Software and Affected Versions Weintek cMT3092X affected versions not specified Description An attacker can modify data that should be restricted to read-only access due to incorrect user management. Recommendations At the moment, there is no information about a newer versi...
Oracle GoldenGate for Big Data Multiple Vulnerabilities 23.x < 23.26.3.0.0 (July 2026 CPU)
According to its self-reported version number, the Oracle GoldenGate for Big Data application located on the remote host is affected by multiple vulnerabilities: - Vulnerability in the Oracle GoldenGate Big Data and Application Adapters product of Oracle GoldenGate component: Third Party Eclipse...
CVE-2026-15630
A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch between authorization based on ?id= and action based on request body...
EUVD-2026-48418
A non-global organization admin in one tenant can bypass tenant boundaries to delete, create, or modify resources in any other tenant by exploiting a mismatch between authorization based on ?id= and action based on request body...
openjdk: Enhance Jar handling (Oracle CPU 2026-07)
A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...
openjdk: Enhance JPEG handling (Oracle CPU 2026-07)
A flaw was found in OpenJDK. ASAN reports a heap integrity violation...
openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)
A flaw was found in OpenJDK. When a server has wantClientAuth and the client sends a nocertificate alert, any client certificates are not verified...
openjdk: Enhance Dataview Implementation (Oracle CPU 2026-07)
A flaw was found in OpenJDK. 1 DataView getter/setter methods use absolute ByteBuffer indexing and ignore the offset, allowing read and write to memory outside its intended window. 2 Missing bounds check in the DataView constructor fails to validate the capacity...
openjdk: Enhance Jar handling (Oracle CPU 2026-07)
A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...
openjdk: Enhance Jar handling (Oracle CPU 2026-07)
A flaw was found in OpenJDK. There exists a potential existential forgery vulnerability in CMS and protocols which use CMS. In Java, CMS is used to sign JAR files...
openjdk: Enhance JPEG handling (Oracle CPU 2026-07)
A flaw was found in OpenJDK. ASAN reports a heap integrity violation...
CVE-2026-64813
JetBrains IntelliJ IDEA prior to version 2026.2 contains a vulnerability where unauthorized settings modification is possible during Remote Development sessions. The issue is indicated as a CRITICAL impact (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) with network attack vector, no privileges r...