116888 matches found
CVE-2026-93493 Io.netty/netty-handler-ssl-ocsp: netty: ocsp validation silently skipped when a response omits the optional nextupdate field
A flaw was found in Netty's netty-handler-ssl-ocsp component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol OCSP response that omits the optional nextUpdate field. This omission causes the OCSP validation to be silently skipped, leading to...
CVE-2024-38639 QTS
An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...
CVE-2026-84241: Improper Authorization
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization...
CVE-2026-11537: Trusting HTTP Permission Methods on the Server Side
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...
ROS-20260918-73-0069
The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Open WebUI SSRF
The vulnerability of the Open WebUI web interface related to insufficient validation of requests on the server side when processing the AIOHTTPCLIENTALLOWREDIRECTS parameter. Exploiting this vulnerability allows a remote attacker to perform an SSRF attack...
Rsync Arbitrary Command Execution
The vulnerability of the Rsync file transfer and synchronization utility is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
ColdFusion Code Execution
The vulnerability of the ColdFusion software platform lies in the lack of measures taken to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Twig CMS Security Policy Unauthorized Access
The vulnerability of Twig CMS’ security system, October CMS, is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
ROS-20260918-73-0056
The vulnerability in the kernel-lt is related to insufficient control of resources with dynamic management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260918-73-0104
The vulnerability of the f2fswriteendio function in the fs/f2fs/data.c module of the F2FS file system in the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity,...
GPON-terminal software Tenda G103 Command Execution
The vulnerability of the actionsetsystemSettings function in the SettingHandler component of the GPON-terminal software framework Tenda G103 is related to the lack of measures to sanitize input data during the processing of the lanIp parameter. Exploiting this vulnerability could allow a remote...
CVE-2025-1350: Generation of Error Message Containing Sensitive Information
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2026-11545: Missing Authorization
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks...
CVE-2026-13639: Insufficient Entropy
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote attackers to read or write arbitrary files and conduct denial-of-service attacks...
ROS-20260918-73-0015
The vulnerability of the drivers/block/rnbd/rnbd-srv.c component in the Linux operating system’s kernel is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data...
Tenda i6 Wi-Fi router Bypass Catalog
The vulnerability of function R7WebsSecurityHandler in the Tenda i6 Wi-Fi router software is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to bypass the directory structure...
CVE-2026-61833: Improper Authorization
zot is a container image and artifact registry based on the Open Container Initiative Distribution Specification. Prior to 2.1.18, the bearer authentication handler in pkg/api/authn.go maps every HTTP method other than GET and HEAD to the push action, so DELETE requests are not checked for the...
EulerOS Virtualization 2.12.0 : wget (EulerOS-SA-2026-3680)
According to the versions of the wget package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within...
