474539 matches found
CVE-2026-101365
A vulnerability exists in Oracle REST Data Services (component: Database Actions ) affecting versions 24.2.0-26.1.0 . A high-privileged attacker with network access via HTTP can exploit this flaw to compromise the service. Impact includes unauthorized read, update, insert, or delete access to acc...
CVE-2026-101361
A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting supported versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the service. Successful exploitation may lead to unautho...
CVE-2026-101360
A vulnerability exists in the Oracle REST Data Services (component: Core ) affecting versions 24.2.0-26.1.0 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the service, potentially gaining unauthorized read , update , insert , or delete access to some ...
CVE-2026-101359
A vulnerability exists in the Oracle REST Data Services (Core component) in versions 24.2.0-26.1.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise the service. Successful exploitation can lead to unauthorized update, insert, or delete access...
CVE-2026-10141
A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted firmware binary can lead to arbitrary firmware update. An attacker can make an authenticated HTTP request to trigger this vulnerabili...
CVE-2026-10141
A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted firmware binary can lead to arbitrary firmware update. An attacker can make an authenticated HTTP request to trigger this vulnerabili...
CVE-2026-10141
The Totolink X2000R (version: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 ) is vulnerable to an Unsigned Firmware flaw in the boa Firmware Update functionality. The root cause is the improper verification of cryptographic signatures (CWE-347); while the system checks for magic bytes and checksums, i...
EUVD-2026-105323
A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted firmware binary can lead to arbitrary firmware update. An attacker can make an authenticated HTTP request to trigger this vulnerabili...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CLSA-2026-1792525290 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
CLSA-2026-1792525288 TuxCare security update for @babel/plugin-proposal-export-default-from (2 CVEs)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...
CLSA-2026-1792525287 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1792525284 TuxCare security update for @babel/plugin-proposal-export-default-from (1 CVE)
TuxCare rebuilt @babel/plugin-proposal-export-default-from to address 1 CVE. Fixed in 7.21.5-tuxcare.1...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document
Summary @apostrophecms/import-export's update-by-key feature lets an imported document carry a :key property for example slug:key whose value is used to find an existing document to update instead of inserting a new one. getUpdateKey/insertOrUpdateDocWithKey lib/methods/import.js use that value...
GHSA-JQW5-W6H3-44G6 ApostropheCMS import-export: NoSQL injection via update-key value lets a crafted import match and overwrite an unidentified document
Summary @apostrophecms/import-export's update-by-key feature lets an imported document carry a :key property for example slug:key whose value is used to find an existing document to update instead of inserting a new one. getUpdateKey/insertOrUpdateDocWithKey lib/methods/import.js use that value...
CLSA-2026-1792518040 TuxCare security update for org.springframework.integration (10 CVEs)
TuxCare rebuilt 39 org.springframework.integration packages to address 10 CVEs. Fixed in 5.4.6-tuxcare.1...
CLSA-2026-1792518003 TuxCare security update for org.springframework.integration (10 CVEs)
TuxCare rebuilt 39 org.springframework.integration packages to address 10 CVEs. Fixed in 5.5.12-tuxcare.1...