29390 matches found
PT-2026-120653
Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to modify a custom role that accounts in other domains hold, and to create custom roles and delete any tha...
PT-2026-120654
Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a remote authenticated user whose credential holds the manage roles permission in named domains - a full-scope API key issued for those domains, or an account assigned the serveradmi...
CVE-2026-87800
IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type...
CVE-2026-112407
Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10 allows remote authenticated users with push access to the application source repository to escalate privileges and access or modify resources outside the application stack in th...
CVE-2026-112407
AWS CICD-toolchain-for-serverless-applications versions 1.0.7 through 1.0.10 are affected by an incorrect privilege assignment within the IAM policy. This flaw allows remote authenticated users with push access to the application source repository to escalate privileges. Attackers can leverage ap...
CVE-2026-43855
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
CVE-2026-43858
A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
EUVD-2026-104859
A vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution with privileges on the service...
CVE-2026-43855
A heap-based buffer overflow vulnerability exists that could allow a remote authenticated attacker to achieve arbitrary code execution . Specific details regarding the affected product, component, or remediation are not provided in the documents.
EUVD-2026-104856
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
CVE-2026-43855
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
EUVD-2026-104794
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated attacker can exploit this via CRLF sequences injected into the uid parameter of the mail/headers and mail/viewsource actions to execute arbitrary IMAP commands...
EUVD-2026-104675
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication...
EUVD-2026-104667
IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition...
CVE-2026-107400
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication...
PT-2026-118648
Name of the Vulnerable Software and Affected Versions AWS CICD-toolchain-for-serverless-applications versions 1.0.7 through 1.0.10 Description Incorrect privilege assignment in the IAM policy allows remote authenticated users with push access to the application source repository to escalate...
PT-2026-118291
A heap-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...
PT-2026-119739
IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to unrestricted upload of a file with a dangerous type...
Linux Distros Unpatched Vulnerability : CVE-2026-113386
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated attacker can exploit this via CRLF sequenc...