715282 matches found
PT-2026-121595
Name of the Vulnerable Software and Affected Versions AOS-8 affected versions not specified Description A buffer overflow exists in the PAPI protocol, which could allow an unauthenticated remote attacker to bypass authentication controls. This could lead to unauthorized administrative access,...
Unity Linux 20.1020e / 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-142747)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-142747 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: synproxy: fix unaligned memory access in timestamp adjustment Use getunalignedbe32 and...
PT-2026-121382
Missing Authorization vulnerability in Cozmoslabs Paid Member Subscriptions paid-member-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Paid Member Subscriptions: from n/a through 3.1.2...
Lotus authorization issue vulnerability
Lotus versions 0.10.2 and earlier contain an authorization issue vulnerability. This vulnerability stems from an authorization bypass in ChangeUserOrganizationView.post, allowing authenticated users to join any organization by providing a UUID. Once attackers obtain other organizations’ UUIDs, th...
Linux Distros Unpatched Vulnerability : CVE-2026-91402
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are...
KB5125471 - Cumulative Update 10 for SQL Server 2025
KB5125471 - Cumulative Update 10 for SQL Server 2025 Release Date: October 22, 2026 Version: 17.0.5035.5 Summary This article describes Cumulative Update 10 CU10 for Microsoft SQL Server 2025. This update package contains 37 fixes that were issued after the release of SQL Server 2025 Cumulative...
PT-2026-121311
Missing Authorization vulnerability in miniOrange Page Restriction WordPress WP page-and-post-restriction allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Restriction WordPress WP: from n/a through 1.6.0...
ANGLE Library Protected Information Access
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
ANGLE Library Protected Information Access
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
ANGLE Library Protected Information Access
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
ANGLE Library Protected Information Access
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
PT-2026-121312
Name of the Vulnerable Software and Affected Versions ЮKassa для WooCommerce versions prior to 2.17.3 Description An authorization flaw in the yoomoney ЮKassa для WooCommerce plugin allows the exploitation of incorrectly configured access control security levels. Recommendations Update to a versi...
PT-2026-121280
Missing Authorization vulnerability in Kings Plugins MarketKing marketking-multivendor-marketplace-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MarketKing: from n/a through 2.1.72...
PT-2026-121484
SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted source, and does not enforce storage partition entitlement by default. An attacker authorized for one tenant can read from or write to another tenant's partition...
PT-2026-121298
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2...
PT-2026-121545
Name of the Vulnerable Software and Affected Versions OpenBao versions 2.3.0 through 2.6.2 Description An incorrect authorization issue exists in the ACL policy cache. This allows tokens to reference policies from arbitrary namespaces through the use of specially crafted policy names. Consequentl...
Drupal Webform permission and access control issues vulnerability
Versions 0.0.0 through 6.2.12 and versions 6.3.0 through 6.3.1 of Drupal Webform contain a permission and access control vulnerability. This vulnerability stems from the use of unsafe operations in permission definitions, potentially leading to stored cross-site scripting attacks...
WatchGuard Agent permission and access control issue vulnerability
Versions of WatchGuard Agent prior to 1.25.14.0000 contain a privilege escalation and access control vulnerability. This vulnerability stems from improper permission allocation within the log directory, potentially allowing locally authenticated non-administrator users to create, modify, append, ...
PT-2026-121309
Missing Authorization vulnerability in Ahmad Majestic Support majestic-support allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Majestic Support: from n/a through 1.2.1...
ROS-20261022-73-0066
The vulnerability of the Portainer container management platform is related to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...