3008 matches found
CLEANSTART-2026-ZY62272 Security fixes in opensearch-k8s-operator-fips 2.5.1-r4
Package opensearch-k8s-operator-fips version 2.5.1-r4 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...
EUVD-2026-50064
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console...
CVE-2026-14515 IBM WebSphere Application Server is affected by cross-site scripting and deserialization vulnerabilities
IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site scripting attack...
EUVD-2026-50063
IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site scripting attack...
CVE-2026-14974
CVE-2026-14974 affects IBM WebSphere Application Server (traditional) 8.5 and 9.0. Root cause: unsafe deserialization of untrusted data, enabling remote code execution by a remote attacker. Affected versions include WebSphere Application Server 8.5.5.0–8.5.5.29 and 9.0.0.0–9.0.5.28 (as shipped in...
EUVD-2026-50022
IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to HTTP request smuggling due to improper handling of TRACE requests...
PT-2026-65588
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request...
PT-2026-65598
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console...
CVE-2026-61957
Unauthenticated Cross Site Scripting XSS in miniorange otp verification = 5.5.1 versions...
PT-2026-65318
Name of the Vulnerable Software and Affected Versions Ultimate Addons for Contact Form 7 versions prior to 3.5.46 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update...
PT-2026-65315
Name of the Vulnerable Software and Affected Versions miniorange otp verification versions prior to 5.5.2 Description Unauthenticated Cross Site Scripting XSS allows an attacker to execute malicious scripts in the browser of a user without requiring authentication. Recommendations Update minioran...
CVE-2026-10033
The EventON Action User plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.5.14. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to grant EventON...
CVE-2026-10033
The CVE concerns the WordPress plugin EventON Action User, affected up to version 2.5.14. The underlying issue is an authorization bypass in an action (evoau_save_capability AJAX action) that allows unauthenticated attackers to grant EventON management capabilities and the upload_files capability...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: prometheus3.5: prometheus3.5-3.5.5-0.3.hum1 aarch64, x8664 prometheus3.5-3.5.5-0.3.hum1.src src Security Fixes: prometheus3.5: CVE-2026-56852...
CVE-2026-65498
Unauthenticated Sensitive Data Exposure in Complianz = 7.5.0 versions...
CVE-2026-24552
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in John-Michael L'Allier Create allows Blind SQL Injection. This issue affects Create: from n/a through 2.5.3...
openjdk: Improve certification checking (Oracle CPU 2026-07)
A flaw was found in OpenJDK. OpenJDK can apply two different security meanings to the same wildcard dNSName SAN across certificate policy enforcement and hostname verification. During path validation, DNSName.constrains compares .foo.com and secret.foo.com literally and returns NAMESAMETYPE, so...
EUVD-2026-48142
Shop Manager Cross Site Scripting XSS in Tabs = 2.5 versions...