30114 matches found
Lightdash v0.1024.6 - Server-Side Request Forgery
Server-Side Request Forgery “SSRF” in the export dashboard functionality of Lightdash version 0.1024.6 allows remote authenticated threat actors to obtain the session cookie of any user who exports a crafted dashboard. When they are exported, dashboards containing HTML elements can trigger HTTP...
Cisco Unified Communications Manager 7/8/9 - Directory Traversal
A directory traversal vulnerability in the Tomcat administrative web interface in Cisco Unified Communications Manager allows remote authenticated users to read arbitrary files via directory traversal sequences in an unspecified input string, aka Bug ID CSCui78815 id: CVE-2013-5528 info: name:...
EUVD-2026-125818
IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to obtain sensitive information due to improper access control...
CVE-2026-91869
IBM Security QRadar EDR versions 3.12 through 3.12.26 are vulnerable to a security restriction bypass. The root cause is improper rate limiting on TOTP verification (CWE-307), which could allow a remote authenticated attacker to bypass security controls. This vulnerability has a CVSS base score o...
CVE-2026-110178
IBM ContextForge MCP Gateway (v1.0.0 through v1.0.11) is vulnerable to improper access control (CWE-284) within the bulk import path. A remote authenticated attacker with team-scoped admin.import permissions can exploit this by sending a crafted POST request to /v1/import using conflict_strategy=...
Security Bulletin: IBM ContextForge MCP Gateway is affected by an improper access control vulnerability in configuration import
Summary IBM ContextForge MCP Gateway provides a configuration import feature that allows authorized users to bulk-load tools, resources, prompts and gateways into a multi-tenant deployment, and is affected by an improper access control vulnerability in which this import feature does not verify...
Ivanti Connect Secure 22.8R2.x < 22.8R2.6 / 25.1.x < 25.1.1.3 Multiple Vulnerabilities
The Ivanti Connect Secure install on the remote host is 22.8R2.x prior to 22.8R2.6, or 25.1.x prior to 25.1.1.3. It is, therefore, affected by multiple vulnerabilities: - Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading ...
CVE-2026-126793
An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 awssql/v2.0.0 and before release 2026-07-29 awssql/v2.0.3 could allow a remote authenticated user to escalate privileges to those of another database user, including a memb...
EUVD-2026-124717
An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 awssql/v2.0.0 and before release 2026-07-29 awssql/v2.0.3 could allow a remote authenticated user to escalate privileges to those of another database user, including a memb...
CVE-2026-126793
The AWS Advanced Go Wrapper is vulnerable to an untrusted search path issue within the Aurora PostgreSQL dialect detection. This flaw affects versions from release 2026-04-06 (awssql/v2.0.0) up to, but before, release 2026-07-29 (awssql/v2.0.3) . A remote authenticated user could exploit this by ...
CVE-2026-126793 Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper
An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 awssql/v2.0.0 and before release 2026-07-29 awssql/v2.0.3 could allow a remote authenticated user to escalate privileges to those of another database user, including a memb...
CVE-2026-126793 Privilege escalation in Aurora PostgreSQL dialect detection in AWS Advanced Go Wrapper
An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release 2026-04-06 awssql/v2.0.0 and before release 2026-07-29 awssql/v2.0.3 could allow a remote authenticated user to escalate privileges to those of another database user, including a memb...
CVE-2026-88266
An external control of system or configuration setting vulnerability in the synomount in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write specific files...
CVE-2026-81557
An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...
CVE-2026-19048
An improper link resolution before file access vulnerability in the thumb in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write arbitrary files and conduct denial-of-service attacks...
CVE-2026-16550
An external control of file name or path vulnerability in the Media Parser in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write arbitrary files...
EUVD-2026-124252
An external control of system or configuration setting vulnerability in the synomount in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write specific files...
CVE-2026-88266
An external control of system or configuration setting vulnerability in the synomount in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to write specific files...
CVE-2026-88266
A vulnerability in the synomount component of Synology DiskStation Manager (DSM) allows remote authenticated users to write specific files due to an external control of system or configuration setting (CWE-15). This affects versions prior to 7.3.2-86009-5 and 7.4.1-90080-1 . Exploitation details ...