91046 matches found
CVE-2026-67102: Improper Authorization
HCL BigFix Service Management is affected by a high-severity Broken Access Control vulnerability, which could allow a low-privileged user to gain unauthorized access to administrative screens and functions reserved for higher-privileged roles...
CVE-2026-93763: Cleartext Storage of Sensitive Information
A protection mechanism failure in the object-document mapper's encryption configuration generation can cause fields that an application declared for client-side field-level encryption to be written and kept in cleartext, without any error or warning. A party holding ordinary read access to the...
CVE-2026-84241: Improper Authorization
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to improper authorization...
CVE-2026-11710: Inconsistent Interpretation of HTTP Requests
IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...
CVE-2026-82892: Improper Neutralization of Special Elements used in an OS Command
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-11538: Improper Output Neutralization for Logs
IBM WebSphere Application Server 9.0 and 8.5 is affected by a log injection vulnerability through crafted LTPA token cookies...
CVE-2026-88622: Improper Neutralization of Special Elements used in a Command
NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handleimportprivilege.php...
CVE-2026-84036: Improper Authorization
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...
CVE-2025-36421: Cleartext Transmission of Sensitive Information
IBM Controller 11.0.0 through 11.0.1 FP7, and 11.1.0 through 11.1.3 FP1 transmits data in clear text that could allow an attacker to obtain sensitive information using man in the middle techniques...
CVE-2026-1030: Generation of Error Message Containing Sensitive Information
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data...
CVE-2025-59607: Untrusted Pointer Dereference
Memory Corruption when copying large input data exceeds normal allocation limits...
CVE-2026-24073: Out-of-bounds Write
Memory corruption when processing decode statistics due to insufficient validation of offset against structure size...
CVE-2026-25280: Out-of-bounds Write
Memory corruption when processing escape handling flow with insufficient user buffer sizes...
CVE-2026-25261: Untrusted Pointer Dereference
Memory corruption while processing rear sensor IOCTL calls...
CVE-2025-55787: Improper Neutralization of Special Elements used in an SQL Command
In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists...
CVE-2026-25290: Integer Overflow or Wraparound
Memory Corruption when validating large data buffers from external sources using addition to check buffer length...
CVE-2026-66571: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in Asset CleanUp: Page Speed Booster = 1.4.0.5 versions...
CVE-2026-66608: Server-Side Request Forgery (SSRF)
Contributor Server Side Request Forgery SSRF in Unlimited Elements For Elementor Free Widgets, Addons, Templates = 2.0.19 versions...