CVE-2026-8464

CVE-2026-8464 : Golem OEE MES is affected by an unauthenticated path-traversal vulnerability that could allow an attacker in the same local network to read arbitrary files from the server by manipulating HTTP request paths. The issue is fixed in version 11.6.0. Affected product: Golem OEE MES; vu...

CVE-2026-45776

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, a flaw in Open XDMoD's access control logic allows an attacker to submit a crafted HTTPS POST request that sets a session variable used for authorization decisions. If an installation of Open XDMoD...

CVE-2025-61308

A reflected cross-site scripted XSS vulnerability in the dfm-menumaintenance.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value...

CVE-2025-61306

A reflected cross-site scripted XSS vulnerability in the dfm-menucoveragealerts.php component of GmbH Mecury Managed Print Services docuForm v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable valu...

CVE-2026-45776 Open XDMoD has Broken Access Control via Client-Controlled Session Variable

OpenXDMoD is an open framework for collecting and analyzing HPC metrics. Prior to version 11.0.3, a flaw in Open XDMoD's access control logic allows an attacker to submit a crafted HTTPS POST request that sets a session variable used for authorization decisions. If an installation of Open XDMoD...

CVE-2026-1343

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 allows an attacker to contact internal authentication endpoints which are...

GHSA-XVMR-9P7M-JMWV vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-17-openj9...

GHSA-Q4WQ-4WHJ-CXHX vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-17-openj9...

GHSA-75HH-423H-RVWG vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-17-openj9...

CVE-2007-3716 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-17-openj9...

CVE-2025-10911 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-17-openj9...

GHSA-5FXQ-F64V-57FQ vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-17-openj9...

GHSA-99RJ-3595-5FRJ vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-26-openj9, openjdk-25-openj9, openjdk-17-openj9...

CVE-2026-34268 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk, openjdk-8-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-26-openj9, openjdk-17-openj9...

CVE-2026-40108

GLPI is a free asset and IT management software package. In versions 11.0.0 through 11.0.6, a technician can store an XSS payload in a ITIL costs. This issue has been fixed in version 11.0.7...

CVE-2025-12694 Local Privilege Escalation in VPN Client

A local privilege escalation vulnerability exists in Forcepoint VPN Client that allows a local non-administrative user to escalate privileges to SYSTEM. This issue affects VPN Client for Windows: versions 6.11.3 and prior...

EUVD-2026-34006

An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7...

EUVD-2018-21949

Paroiciel 11.20 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the tRecIdListe parameter. Attackers can send GET requests to the trec.php endpoint with crafted SQL payloads to extract database...

GLPI 跨站脚本漏洞

GLPI is an open-source IT and asset management software developed by GLPI. This software provides a comprehensive IT resource management interface, allowing you to create databases for managing various IT assets such as computers, monitors, servers, printers, network devices, telephones, and even...

PT-2026-45355

Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this vulnerability is exploited, a local authenticated attacker who can log in to the server where the affected product is installed may obtain SYSTEM privilege...