41164 matches found
CVE-2026-14522
IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to execute arbitrary commands due to improper neutralization of CRLF characters...
CVE-2026-67596 CSL 1010 M2M 3G WiFi Module 2.2.1.4 Weak Encryption via Router.cfg
CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher that uses a static key to obfuscate the configuration backup file. Attackers can...
CVE-2026-11383 Cross-site Scripting in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager
IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console...
CVE-2026-11383
Summary of CVE-2026-11383 : IBM WebSphere Application Server (WAS) is affected by cross-site scripting (XSS) in the Administrative Console when shipped with Tivoli System Automation Application Manager 4.1 and related bundles. Connected documents confirm affected WAS versions include 8.5 and 9.0 ...
OPENSUSE-SU-2026:21487-1 Security update for tomcat10
This update for tomcat10 fixes the following issues: Update to Tomcat 10.1.57. Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass bsc1271397. - CVE-2026-59084: EncryptInterceptor requirements are not clearly documented bsc1271398. Oth...
CVE-2026-18369 Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects
A flaw was found in Dogtag PKI's ACME responder where the HTTP-01 challenge validator accepts IP address literals as dns identifiers and follows HTTP redirects without validating that the target is a public address. An unauthenticated ACME account holder can exploit this to perform server-side...
EUVD-2026-51078
A flaw was found in Dogtag PKI's ACME responder where the HTTP-01 challenge validator accepts IP address literals as dns identifiers and follows HTTP redirects without validating that the target is a public address. An unauthenticated ACME account holder can exploit this to perform server-side...
CVE-2026-16971
The CVE-2026-16971 entry concerns the IRIS web application (noted around version 2.4.26) where MFA validation is not protected against brute-force attempts. The connected CVE records consistently describe insufficient brute-force protection for OTP validation, indicating that an attacker could re...
CVE-2026-16971 DFIR-IRIS Missing Brute Force Protection in OTP Validation
The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...
BIT-SQLITE-2026-51297
sqlite 3.41 has a use-after-free vulnerability in the JSON parsing logic. Remote adversaries can craft malicious JSON payload to trigger memory free followed by illegal memory access, which may lead to arbitrary code execution, sensitive information leakage and service denial...
CLEANSTART-2026-WW48003 Security fixes in perl 5.26.2-r1
Package perl version 5.26.2-r1 fixes 1 vulnerabilities: CVE-2018-12015...
CLEANSTART-2026-BS77615 Security fixes in curl 8.11.1-r0
Package curl version 8.11.1-r0 fixes 1 vulnerabilities: CVE-2024-11053...
CLEANSTART-2026-QR29446 Security fixes in terragrunt-fips 0.95.1-r2
Package terragrunt-fips version 0.95.1-r2 fixes 1 vulnerabilities: ghsa-6g7g-w4f8-9c9x...
CLEANSTART-2026-EH19903 Security fixes in kyverno-fips 1.18.0-r0
Package kyverno-fips version 1.18.0-r0 fixes 2 vulnerabilities: CVE-2026-32952, ghsa-pjcq-xvwq-hhpj...
CLEANSTART-2026-JN50813 Security fixes in eks-distro-kube-apiserver 1.34.2-r0
Package eks-distro-kube-apiserver version 1.34.2-r0 fixes 21 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914...
CLEANSTART-2026-CS52712 Security fixes in redis 6.2.4-r0
Package redis version 6.2.4-r0 fixes 1 vulnerabilities: CVE-2021-32625...
CLEANSTART-2026-AU23381 Security fixes in cortex 1.21.1-r6
Package cortex version 1.21.1-r6 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...
CLEANSTART-2026-YA69220 Security fixes in prometheus 3.11.3-r2
Package prometheus version 3.11.3-r2 fixes 1 vulnerabilities: CVE-2026-42504...