980209 matches found
CVE-2026-16904
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment...
CVE-2026-16860
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element...
CVE-2026-73327
The Initial Description states "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Joomla is a CNA in scope." This CVE ID is rejected/not used and does not represent an active vulnerability entry.
EUVD-2026-57390
Joomla 6.1.1 contains a path traversal vulnerability in the comjoomlaupdate extension that allows a Super User to be induced into extracting a crafted archive containing directory traversal sequences or absolute paths in ZIP entry filenames. Attackers can supply malicious ZIP entry names with...
CVE-2026-73327 Joomla 6.1.1 Zip Slip Path Traversal via com_joomlaupdate extract.php
Joomla 6.1.1 contains a path traversal vulnerability in the comjoomlaupdate extension that allows a Super User to be induced into extracting a crafted archive containing directory traversal sequences or absolute paths in ZIP entry filenames. Attackers can supply malicious ZIP entry names with...
github.com/go-chi/chi/middleware: go-chi/chi: IP spoofing via X-Forwarded-For header manipulation
A flaw was found in the go-chi/chi component. The RealIP middleware, responsible for resolving the request source IP, does not properly validate trusted proxies when processing the X-Forwarded-For header. A remote attacker can exploit this by prepending a forged IP address to the X-Forwarded-For...
CVE-2026-16907
IBM i bulletin CVE-2026-16907 affects IBM i 7.3–7.6 (5770-SS1) and describes a remote authenticated code execution vulnerability in the Debug Server caused by improper bounds checking. Affected releases: 7.6, 7.5, 7.4, and 7.3. Impact per the CVSS: Confidentiality Low, Integrity High, Availabilit...
CVE-2026-16907 IBM i is Affected By Multiple Vulnerabilities in the Debug Server
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to improper bounds checking...
EUVD-2026-57387
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to improper bounds checking...
EUVD-2026-57386
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements in an OS command...
CVE-2026-17248 IBM i is Affected By Multiple Vulnerabilities in the Debug Server
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements in an OS command...
MAL-2026-13927 Malicious code in svelte-kit-vim (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb45cf2ae29595bdddd78ba81f4798842b6caf4cefd8abfcbad23f1eb812c3be The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
EUVD-2026-57385
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of input size...
CVE-2026-17271 IBM i is Affected By Multiple Vulnerabilities in the Debug Server
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of input size...
CVE-2026-17271
IBM i is affected by multiple vulnerabilities in the Debug Server, including CVE-2026-17271 which could allow a remote attacker to cause a denial of service due to improper validation of input size. Affected are IBM i releases 7.6, 7.5, 7.4, and 7.3 (5780-SS1 family), with the CVE described in IB...
CVE-2026-17218 IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write...
CVE-2026-17218
CVE-2026-17218 affects IBM i (Line Printer Daemon, LPD) across releases 7.3–7.6. An out-of-bounds write could allow a remote attacker to execute arbitrary code. The IBM bulletin confirms a CVSS v3.1 base score of 9.8 (Network, high impact) and lists affected products/versions along with fixed pat...