115615 matches found
AI Security at Machine Speed: A Roadmap for Modern AppSec
With AI API calls set to grow 1,000x by 2027, you need a roadmap to secure your enterprise against agentic threats...
Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server is affected by multiple vulnerabilities when using when using Web Server Plug-ins.
Summary The security issue described in CVE-2026-8633, CVE-2026-8620 has been identified in WebSphere Application Server included as part of IBM Tivoli Composite Application Manager for Application Diagnostics. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...
Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server is affected by an identity spoofing vulnerability
Summary The security issue described in CVE-2026-8644 has been identified in WebSphere Application Server included as part of IBM Tivoli Composite Application Manager for Application Diagnostics. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affecte...
Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed WebSphere Application Server traditional is affected by remote code execution
Summary The security issue described in CVE-2026-9319 has been identified in WebSphere Application Server included as part of IBM Tivoli Composite Application Manager for Application Diagnostics. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affecte...
Security Bulletin: IBM Tivoli Composite Application Manager for Application Diagnostics installed IBM WebSphere Application Server traditional is affected by remote code execution.
Summary The security issue described in CVE-2026-9330 and CVE-2026-9311 as been identified in the WebSphere Application Server included as part of IBM Tivoli Composite Application Manager for Application Diagnostics. Vulnerability Details Refer to the security bulletins listed in the...
CVE-2026-8904
The FastPicker, an order picker and order management system oms for WooCommerce on steroids plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the settingsPage function. This makes i...
CVE-2026-11815
An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken security expectations or remote code execution...
EUVD-2026-35992
An attacker who intercepts and tampers with traffic between the client application and the API Gateway server could potentially deserialize arbitrary objects. This vulnerability could lead to broken security expectations or remote code execution...
CVE-2026-44757
SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user�s browser within the context of the application. This issue has a low impact on the...
CLEANSTART-2026-FT24360 Flask is a web server gateway interface (WSGI) web application framework
Multiple security vulnerabilities affect the apache-superset package. Flask is a web server gateway interface WSGI web application framework. See references for individual vulnerability details...
de.digitalcollections:iiif-bookshelf-webapp (>=2.3.1, <=2.5.1), io.gumga:gumga-application (>=1.5.23, <=4.0.4) +3 more potentially affected by CVE-2026-41717 via org.springframework.data:spring-data-mongodb (1.10.0.release)
org.springframework.data:spring-data-mongodb MAVEN version 1.10.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-mongodb and may be impacted: - de.digitalcollections:iiif-bookshelf-webapp =2.3.1, =1.5.23,...
cloud.wondrify:grails-rabbit-amqp-plugin (7.0.0), cn.hiapi:hiapi-core-application (1.0.8) +374 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (>=3.2.0, <=3.2.10)
org.springframework.amqp:spring-amqp MAVEN version =3.2.0, =2.0.1, =1.0.1-jdk21, =3.5.5, =3.5.0-jdk17-1.0.0, =0.7.0, =0.7.0, =0.2.0, =0.1.0-beta.1, =0.1.0 - com.buession.cas:cas-server-support-logging 4.0.0 and more Source cves: CVE-2026-41714 Source advisory: GHSA-P8QJ-FJ6R-W7Q9...
cloud.wondrify:grails-rabbit-amqp-plugin (7.0.0), cn.hiapi:hiapi-core-application (1.0.8) +374 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (>=3.2.0, <=3.2.10)
org.springframework.amqp:spring-amqp MAVEN version =3.2.0, =2.0.1, =1.0.1-jdk21, =3.5.5, =3.5.0-jdk17-1.0.0, =0.7.0, =0.7.0, =0.2.0, =0.1.0-beta.1, =0.1.0 - com.buession.cas:cas-server-support-logging 4.0.0 and more Source cves: CVE-2026-41701 Source advisory: OSV:GHSA-P5F7-RJHP-PXVC...
PT-2026-48452
A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in browser to overwrite system clipboard contents...
Lenovo Android Application security vulnerabilities
Lenovo Android Application is an application developed by Lenovo Corporation, designed for managing Lenovo devices. There is a security vulnerability in Lenovo Android Application, which stems from websites accessed via the built-in browser potentially overwriting system clipboard contents...
PT-2026-75977
Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch application/json-patch+json requests. When a persistent entity exposes a Map-typed property, the JSON Pointer path segment used as the map key is embedded directly into a SpEL...
PT-2026-48435
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the install blueprint declares only bp.before request → @jwt required app/routes/install/routes.py:36-39. The individual endpoints install exporter, install waf, install geoip,...
CVE-2026-41729: Improper Neutralization of Special Elements used in an Expression Language Statement
Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch application/json-patch+json requests. When a persistent entity exposes a Map-typed property, the JSON Pointer path segment used as the map key is embedded directly into a SpEL...
PT-2026-48470
A stored cross-site scripting vulnerability existed in MISP BSimVis tag rendering code. Several client-side rendering paths interpolated tag names, collection names, entity identifiers, cluster names, and tag metadata directly into HTML, HTML attributes, inline JavaScript event handlers, and CSS...
CVE-2026-7516: Exposed Dangerous Method or Function
A vulnerability was identified in the Lenovo Android Application, distributed exclusively on tablets in the Chinese market, that could allow a website visited by the built-in browser to overwrite system clipboard contents...