CreditNirvana Collections Platform authorization issue vulnerability

Versions prior to 4.8.2 of the CreditNirvana Collections Platform contain an authorization issue vulnerability. This vulnerability stems from improper authentication and authorization controls within the platform’s login service. Unauthenticated remote attackers can manipulate authentication...

WordPress Amelia authorization issue vulnerability

WordPress Amelia versions 2.4.10 and earlier contain an authorization issue vulnerability. This vulnerability stems from a lack of proper authorization checks, which may lead to exploitation of improperly configured access control levels...

ROS-20261026-73-0149

The vulnerability in openssh is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe versions prior to 26.7.2, and Apple visionOS versions pri...

boneIO Black authorization issue vulnerability

Versions 1.2.0 through 1.6.0 of boneIO Black contain an authorization issue vulnerability. This vulnerability stems from the Web interface POST /api/login and the SSH service failing to limit the number of authentication attempts or enforce strict password complexity rules. As a result,...

Prefetch Component Protected Information Access

The Prefetch component vulnerability in Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Blink Component Protected Information Access

The Blink component vulnerability in Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

MediaRecording Component Protected Information Access

The vulnerability in the MediaRecording component of Google Chrome and Microsoft Edge web browsers is related to improper protection against attacks via external physical channels. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information by using a...

Favicon Component Protected Information Access

The Favicon component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper protection against attacks via external physical channels. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information by using a specially crafte...

Media Component Protected Information Access

The Media component vulnerability in Google Chrome and Microsoft Edge web browsers is related to the use of an uninitialized resource. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

FedCM Component XSS

The vulnerability in the FedCM web browser components for Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as trigger a...

Codecs Component Protected Information Access

The vulnerability in the Codecs component of Google Chrome and Microsoft Edge web browsers is related to the use of an uninitialized resource. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Codecs Component Protected Information Access

The vulnerability in the Codecs component of Google Chrome and Microsoft Edge web browsers is related to errors in variable initialization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

CrashReporting Component Protected Information Access

The vulnerability in the CrashReporting component of Google Chrome and Microsoft Edge web browsers involves reading protected information beyond its permitted buffer boundaries. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially...

FedCM Component Access Protected Information

The vulnerability in the FedCM web browser components for Google Chrome and Microsoft Edge is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe...

Siemens Mendix SAML authorization issue vulnerability

The Siemens Mendix SAML vulnerability stems from improper protection against SAML assertion replay during authentication processes initiated by an IdP. This may allow unauthenticated remote attackers to gain unauthorized access to the application by replaying valid SAML responses...

Apple iOS security vulnerabilities

A security vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe versions...

PT-2026-123268

Missing Authorization vulnerability in Dylan Kuhn Geo Mashup geo-mashup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Geo Mashup: from n/a through 1.13.22...

WordPress LearnPress authorization issue vulnerability

WordPress LearnPress versions 4.4.11 and earlier contain an authorization issue vulnerability. This vulnerability stems from missing authorization checks and may allow attackers to exploit improperly configured access control levels...