561 matches found
EUVD-2026-123016
AsiaInfo Business Support System BSS 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens JWT. A remote, unauthenticated attacker could forge a well-formed JWT without a valid signature and use it to execute privileged actions. Fixed in 9.2.41...
CVE-2026-125298
AsiaInfo Business Support System BSS 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens JWT. A remote, unauthenticated attacker could forge a well-formed JWT without a valid signature and use it to execute privileged actions. Fixed in 9.2.41...
CVE-2026-125298
The AsiaInfo Business Support System (BSS) versions 9.2.0 through 9.2.40 are vulnerable to a security flaw where the system fails to correctly verify cryptographic signatures for JSON Web Tokens (JWT) . This flaw allows a remote, unauthenticated attacker to forge a well-formed JWT without a valid...
CVE-2026-125298: AsiaInfo International: AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON…
AsiaInfo Business Support System BSS 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens JWT. A remote, unauthenticated attacker could forge a well-formed JWT without a valid signature and use it to execute privileged actions. Fixed in 9.2.41...
CVE-2026-54146
A flaw was found in OpenHuman. The desktop process exposes sensitive authentication tokens in its process environment, allowing other local processes running under the same user account to inspect and capture them. A local attacker can exploit this flaw to authenticate to the core service with th...
CVE-2026-116885
Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticated attackers to inject markup through the unescaped id parameter. Attackers can lure an smw-admin administrator into opening a crafted look...
CVE-2026-116885 Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter
Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticated attackers to inject markup through the unescaped id parameter. Attackers can lure an smw-admin administrator into opening a crafted look...
CVE-2026-116885 Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter
Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticated attackers to inject markup through the unescaped id parameter. Attackers can lure an smw-admin administrator into opening a crafted look...
CVE-2026-116885 Semantic MediaWiki before 7.3.1 Reflected XSS via Special:SMWAdmin id Parameter
Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticated attackers to inject markup through the unescaped id parameter. Attackers can lure an smw-admin administrator into opening a crafted look...
EUVD-2026-110713
Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticated attackers to inject markup through the unescaped id parameter. Attackers can lure an smw-admin administrator into opening a crafted look...
PT-2026-126346
Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the Special:SMWAdmin ID lookup that allows unauthenticated attackers to inject markup through the unescaped id parameter. Attackers can lure an smw-admin administrator into opening a crafted look...
CVE-2026-3303
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing CORS which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains...
CVE-2026-3303 IBM Concert Software Permissive Cross-domain Security Policy
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing CORS which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains...
CVE-2026-3303 IBM Concert Software Permissive Cross-domain Security Policy
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing CORS which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains...
EUVD-2026-104532
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing CORS which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains...
CVE-2026-3303
IBM Concert Software versions 1.0 through 3.0.0 are vulnerable to a permissive cross-domain security policy due to how it implements cross-origin resource sharing (CORS) . The software fails to limit domain names to only trusted domains, which could allow an attacker to perform privileged actions...
PT-2026-117526
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing CORS which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains...
CVE-2026-3303: Permissive Cross-domain Policy with Untrusted Domains
IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing CORS which could allow an attacker to carry out privileged actions as the domain name is not being limited to only trusted domains...
EUVD-2026-95405
TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without...
CVE-2026-105672
TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without...