189920 matches found
CVE-2026-101366
A vulnerability exists in the Oracle REST Data Services (component: ADP ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the service. Successful exploitation results in unauthorized read access to a su...
CVE-2026-101364
A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, though the attack requires human interaction from another person. Due to a ...
CVE-2026-101363
A vulnerability exists in the Graph QL component of Oracle REST Data Services affecting supported versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise the service, potentially resulting in unauthorized read access to a subset of acc...
CVE-2026-101362
A vulnerability exists in the Core component of Oracle REST Data Services (affected versions 24.2.0-26.1.0 ). An unauthenticated attacker with network access via HTTP can exploit this difficult to exploit vulnerability, though it requires human interaction from a person other than the attacker. S...
CVE-2026-101361
A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the service. Successful exploitation may lead to unautho...
CVE-2026-101360
A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially gaining unauthorized read , update , insert , or delete access to some ...
DEBIAN-CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
AZL-110193 CVE-2026-107928 affecting package rust 1.75.0-31
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
AZL-109905 CVE-2026-107928 affecting package cmake 3.30.3-15
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
AZL-110268 CVE-2026-107928 affecting package rust 1.96.1-2
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
AZL-110298 CVE-2026-107928 affecting package tensorflow 2.16.1-11
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
ALPINE-CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
AZL-109983 CVE-2026-107928 affecting package curl 8.11.1-11
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
AZL-110052 CVE-2026-107928 affecting package mysql 8.0.46-2
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
CVE-2016-20104
EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the 'path' parameter. Attackers can send GET requests to /scripts/logdownload.php with traversal sequences like ../../etc/passwd,...
Incorrect Authorization
Overview apostrophe is a content management system CMS for Node.js. It supports in-context editing, schema-driven content types, flexible widgets and a great deal more. This module contains everything necessary to build a website with ApostropheCMS. Affected versions of this package are vulnerabl...
Use of GET Request Method With Sensitive Query Strings
Overview apostrophe is a content management system CMS for Node.js. It supports in-context editing, schema-driven content types, flexible widgets and a great deal more. This module contains everything necessary to build a website with ApostropheCMS. Affected versions of this package are vulnerabl...
Use of GET Request Method With Sensitive Query Strings
Overview @apostrophecms/passport-bridge is a Passport.js authentication for Apostrophe Affected versions of this package are vulnerable to Use of GET Request Method With Sensitive Query Strings via an unspecified vector in the package, allowing an authenticated attacker with low privileges to rea...
