2016 matches found
org.apache.camel/camel-mail: Apache Camel Mail Component: Credential exposure and information disclosure via improper input validation of mail headers
A flaw was found in the Apache Camel Mail Component. This vulnerability, due to improper input validation, allows a remote attacker to exploit routes that channel untrusted input into the mail producer without proper header stripping. Before version 4.19.0, this could lead to the redirection of...
CLEANSTART-2026-RT21199 Security fixes in consul 1.21.5-r3
Package consul version 1.21.5-r3 fixes 19 vulnerabilities: CVE-2026-39835, CVE-2026-46598, CVE-2026-25681, CVE-2026-27136, CVE-2026-42502...
CLEANSTART-2026-SD61348 Security fixes in istio-fips 1.26.8-r4
Package istio-fips version 1.26.8-r4 fixes 19 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...
CLEANSTART-2026-YN68631 Security fixes in percona-xtradb-cluster-operator 1.19.1-r0
Package percona-xtradb-cluster-operator version 1.19.1-r0 fixes 2 vulnerabilities: ghsa-pc3f-x583-g7j2, CVE-2026-35469...
CLEANSTART-2026-CX37919 Security fixes in prometheus-mysqld-exporter-fips 0.19.0-r0
Package prometheus-mysqld-exporter-fips version 0.19.0-r0 fixes 1 vulnerabilities: CVE-2026-26958...
CLEANSTART-2026-IV17968 Security fixes in mongodb 7.0.32-r1
Package mongodb version 7.0.32-r1 fixes 19 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...
CVE-2026-3093
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.0 before 19.0.5, 19.1 before 19.1.3, and 19.2 before 19.2.1 that under certain conditions could have allowed an attacker to execute arbitrary JavaScript in another user's browser via a crafted URL, due to improper...
CVE-2026-66724
MWDB Core versions =2.0.0 and 2.19.0 contain a missing authorization vulnerability in the deprecated config and blob upload endpoints. These endpoints accept the undocumented POST method, which bypasses the capability checks applied to the documented PUT method. This allows any authenticated user...
CVE-2026-66723
CVE-2026-66723 affects MWDB Core versions 2.2.0 up to but not including 2.19.0. The Vulnerability: Remote Instances proxy API fails to verify authentication for incoming requests, allowing an unauthenticated remote attacker to perform actions on a remote MWDB instance using the API key’s identity...
CVE-2026-66723 Missing authentication requirement in Remote Instances proxy API in MWDB Core
MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...
CVE-2026-66723 Missing authentication requirement in Remote Instances proxy API in MWDB Core
MWDB Core versions =2.2.0 and 2.19.0 contain a missing authorization vulnerability in the Remote Instances proxy API. The proxy API does not verify authentication for incoming requests, allowing an unauthenticated remote attacker to send arbitrary requests to a remote MWDB instance using the...
CVE-2026-66724
MWDB Core versions 2.0.0 to 2.18.x contain a missing authorization vulnerability in deprecated config and blob upload endpoints. The undocumented POST method bypasses capability checks that apply to the documented PUT method, allowing any authenticated user without adding_configs or adding_blobs ...
CVE-2026-59529
Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...
EUVD-2026-49205
Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...
CVE-2026-59529 WordPress Ebook Store plugin <= 6.19 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...
UBUNTU-CVE-2026-16554
cJSON library is vulnerable to an integer overflow in the printstringptr function in cJSON.c on 32-bit platforms. The escapecharacters counter, a 32-bit sizet, can wrap around when processing strings containing approximately 858,993,460 or more control characters, causing the output buffer to be...
EUVD-2026-48218
Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...
EUVD-2026-48217
Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...
CVE-2026-65452
CVE-2026-65452 affects the WordPress Ebook Store plugin up to version 6.19, with an Unauthenticated Broken Access Control vulnerability. The description in both records confirms unauthenticated access issues that impact access control, but no technical exploit steps, root cause specifics, or reme...