116210 matches found
CVE-2026-63516 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62829 Microsoft SharePoint Server Spoofing Vulnerability
...
Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery (CVE-2026-14529)
Summary IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a server-side request forgery vulnerability when sipServlet-1.1 is enabled. Vulnerability Details CVEID:CVE-2026-14529 DESCRIPTION: IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere...
CVE-2026-48387 CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not requir...
CVE-2026-70639
A flaw was found in llama.cpp. A null pointer dereference vulnerability exists in the LLaMA-Android JNI wrapper. This flaw allows an attacker to provide a malicious or corrupt model file, which causes the bench1model function to attempt to use an invalid memory address. This leads to a crash of t...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 Security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.25 Security update
A security update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2025-31114
creationtimestamp| type| source ---|---|--- 2026-08-11 16:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mst2jrpkgr2u 2026-08-14 04:50:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mszeav5rli2f...
CVE-2026-72925
SWC is a TypeScript / JavaScript compiler written in Rust. Prior to @swc/html 1.15.47-nightly-20260729.1 and swchtmlminifier 59.0.0, the minifyJson processing in crates/swchtmlminifier/src/lib.rs parsed and serialized attacker-controlled JSON in application/json and application/ld+json script...
Update 27.8 for Microsoft Dynamics 365 Business Central 2025 Release Wave 2 (Application Build 27.8.50894, Platform Build 27.0.50789)
Update 27.8 for Microsoft Dynamics 365 Business Central 2025 Release Wave 2 Application Build 27.8.50894, Platform Build 27.0.50789 Applies To Dynamics 365 Business Central on-premises Overview This update replaces previously released updates. You should always install the latest update. After yo...
Update 26.14 for Microsoft Dynamics 365 Business Central 2025 Release Wave 1 (Application Build 26.14.50858, Platform Build 26.0.50788)
Update 26.14 for Microsoft Dynamics 365 Business Central 2025 Release Wave 1 Application Build 26.14.50858, Platform Build 26.0.50788 Applies To Dynamics 365 Business Central on-premises 2025 release wave 1, version 26 Overview This update replaces previously released updates. You should always...
Application Information Services Elevation of Privilege Vulnerability
Use after free in Application Information Services allows an authorized attacker to elevate privileges locally...
Security update for gstreamer-plugins-bad
This update for gstreamer-plugins-bad fixes the following issue: CVE-2026-52718: byte count instead of a bit count in gstav1parserparsetilelistobu can cause parser desynchronization and an application crash bsc1268394. Patch Instructions: To install this SUSE update use the SUSE recommended...
juice-shop v20.2.0
OWASP Juice Shop The most trustworthy online shop out there. @dschadow — The best juice shop on the whole internet! @shehackspurple — Actually the most bug-free vulnerable application in existence! @vanderaj — First you 😂😂then you 😢 @kramse — But th...
Improper Input Validation
Apache Camel is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of user-supplied input, allowing specially crafted input to bypass expected processing logic and potentially affect application behavior or security...
CVE-2026-8158
The Signed Video Framework contained a buffer overflow issue which could lead the application using this framework to crash. The issue exclusively affects the tools used for the validation of signed content. The AXIS OS device's signed video functionality remains unaffected...
CVE-2026-6505
The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...
CVE-2026-6505
The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...
CVE-2026-6505
The ACAP framework contains a Time-of-Check to Time-of-Use TOCTOU race condition, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces...