116188 matches found
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2026-14529)
Summary IBM WebSphere Application Server is used by IBM Tivoli System Automation Application Manager and is affected by a server-side request forgery Vulnerability Details CVEID:CVE-2026-14529 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Libert...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2026-14446)
Summary IBM WebSphere Application Server used by IBM Tivoli System Automation Application Manager and is affected by a privilege escalation vulnerability. Required fixes for affected WebSphere Application Server has been published in the security bulletin links below. Vulnerability Details...
CVE-2026-37067
Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request...
CVE-2026-81893: Out-of-bounds Write
A flaw was found in gdk-pixbuf. When loading a specially crafted JPEG image containing chunked ICC profile markers, an error during ICC profile parsing can leave stale size metadata after the profile buffer is freed. A subsequent allocation in the same decode can cause an out-of-bounds write,...
CVE-2026-81335: Missing Authorization
Baserow dispatches an Application Builder data source without acting on the result of its permission check. The dispatch and record-name views in backend/src/baserow/contrib/builder/api/datasources/views.py are declared with a permission class that admits any caller, so a request carrying no...
CVE-2026-79718: Improper Neutralization of Input During Web Page Generation
Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...
CVE-2026-56652: Improper Neutralization of Formula Elements in a CSV File
Dool in versions up to 1.3.8 is vulnerable to a CSV injection vulnerability when exporting data to a CSV file, as it fails to sanitize cell content beginning with special formula characters like =, +, -, or @. A local attacker can exploit this by running a process with a crafted name starting wit...
CVE-2026-47849: Improperly Controlled Modification of Dynamically-Determined Object Attributes
Spring Data REST does not guard identifier @Id and version @Version properties against mutation via RFC 6902 JSON Patch application/json-patch+json requests. Spring Data REST 5.1.0 Spring Data REST 5.0.0 - 5.0.6 Spring Data REST 4.5.0 - 4.5.12 Spring Data REST 4.0.0 - 4.4.15 Spring Data REST 3.7....
CVE-2026-37067
Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to extract all application logs from a desired date forwards via a specially crafted POST request...
CVE-2026-37067
An incorrect access control vulnerability exists in the Veno File Manager Project 4.4.9 within the /vfm-admin/admin-panel/view/save-cvs.php component. This flaw allows an unauthenticated attacker to extract all application logs from a specific date onwards by sending a specially crafted POST requ...
PT-2026-82557
Name of the Vulnerable Software and Affected Versions Netron versions prior to 9.1.3 Description The desktop application contains a Reflected Cross-Site Scripting XSS flaw caused by unsanitized node names. This allows an attacker to hide specific nodes, conduct port scanning, or leverage a Chrome...
PT-2026-82556
Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...
PT-2026-82555
Reflected XSS in Netron versions =9.1.2 on desktop application through unsanitized node names allows an attacker to hide certain nodes, perform port scanning or abuse a Chrome n-day to achieve Remote Code Execution...
Security update for gstreamer-plugins-bad (moderate)
openSUSE security update: security update for gstreamer-plugins-bad ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21629-1 Rating: moderate References: bsc1268394 Cross-References: CVE-2026-52718 CVSS scores: CVE-2026-52718 SUSE : 6.5...
NethServer WebTop 1.5.6 Cross Site Scripting
NethServer WebTop module versions 1.5.6 and below suffer from two persistent cross site scripting vulnerabilities...
CVE-2026-45694
LibreNMS is a network monitoring system. In versions up to and including 26.4.0, the Proxmox application view is vulnerable to reflected cross-site scripting through the user-supplied instance and vmid GET parameters, which are reflected into the page title without adequate encoding. The paramete...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2026-16184)
Summary IBM WebSphere Application Server is used by IBM Tivoli System Automation Application Manager and is affected by an authentication bypass. Vulnerability Details CVEID:CVE-2026-16184 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass...
Security Bulletin: IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager is affected by a security bypass vulnerability (CVE-2026-10842)
Summary A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager CVE-2026-10842 Vulnerability Details CVEID:CVE-2026-10842 DESCRIPTION: IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application...
CVE-2026-79055
A flaw was found in Google Chrome on Android. An information leak vulnerability exists in the Sharing feature. A local attacker, by leveraging social engineering tactics, could exploit this flaw through a co-installed application, potentially leading to the disclosure of sensitive information...
