116226 matches found
EUVD-2026-49738
SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the trace is activated by a privileged user. An attacker with access to the resulting trace data could obtain identifiers that allow impersonation of legitimate...
Exploit for Insertion of Sensitive Information into Log File in Ayesa Ibermatica_Rps
CVE-2023-3349 / CVE-2023-3350 | IBERMATICA RPS 2019 Security...
vulnerabilities found in Apple MacOS
Apple has addressed several vulnerabilities in MacOS, specifically in the versions Sequoia 15.7.8, Sonoma 14.8.8, and Tahoe 26.x. These vulnerabilities involve various security issues in macOS, including insufficient sandbox restrictions, which may allow applications to gain unauthorized access t...
Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by a security bypass vulnerability
Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM is affected by a security bypass vulnerability CVE-2026-10842 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products|...
SafeLine v9.3.11
SafeLine - Make your web apps secure ๐ Website | ๐ Docs | ๐ Live Demo | ๐โโ๏ธ Discord | ไธญๆ็ ๐ INTRODUCTION SafeLine is a self-hosted WAFWeb Application Firewall to protect your web apps from attacks and exploits. A web application firewall helps protect web apps by filtering and monitoring HTTP...
EUVD-2021-34855
An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. If a customer restricts access to the web console by IP address or subnets, the API endpoints are not restricted. If credentials/API keys are known to an attacker, the appliance can still be accessed via the API,...
CVE-2026-14974: Deserialization of Untrusted Data
IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data...
CVE-2026-14528: Insertion of Sensitive Information into Log File
IBM WebSphere Application Server 9.0, and 8.5 traditional could allow a remote attacker to obtain sensitive information...
CVE-2026-14515: Improper Neutralization of Input During Web Page Generation
IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to conduct a cross-site scripting attack...
CVE-2026-14446: Missing Authentication for Critical Function
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to broken access control/privilege escalation in the administrative console...
CVE-2026-16184: Missing Authorization
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafted unauthenticated request...
PT-2026-65598
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 9.0 IBM WebSphere Application Server version 8.5 Description The administrative console contains a broken access control issue that allows for privilege escalation. Recommendations At the moment, there ...
CVE-2026-58246: Exposure of Sensitive System Information to an Unauthorized Control Sphere
SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the trace is activated by a privileged user. An attacker with access to the resulting trace data could obtain identifiers that allow impersonation of legitimate...
PT-2026-65434
SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the trace is activated by a privileged user. An attacker with access to the resulting trace data could obtain identifiers that allow impersonation of legitimate...
CVE-2026-15325: Inconsistent Interpretation of HTTP Requests
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty is vulnerable to HTTP request smuggling due to improper handling of TRACE requests...
CVE-2026-16192: Uncontrolled Recursion
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability when the restConnector-2.0 feature is enabled...
PT-2026-65578
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 traditional Description Remote attackers can execute arbitrary code due to unsafe deserialization of untrusted data. Deserialization is the process of converting a data stream back into an...
CVE-2026-14976: Missing Authentication for Critical Function
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the collectiveController-1.0 feature enabled...
CVE-2026-14981: Uncontrolled Resource Consumption
IBM WebSphere Application Server and IBM WebSphere Application Server - Liberty are affected by a denial of service vulnerability in the HTTP channel due to unbounded allocation of resources without limits...
CVE-2026-15057: Out-of-bounds Write
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service due to uncontrolled heap allocation...