CVE-2026-79840 HPE NonStop XABroker - Memory corruption vulnerability

A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash...

EUVD-2026-102093

A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash...

CVE-2026-79840

A buffer overflow vulnerability exists in HPE NonStop XABroker (specifically version T0804L40 and earlier ) which can lead to memory corruption and subsequent application crashes . The vulnerability is categorized as a stack-based buffer overflow (CWE-120). HPE has released a fix; the resolved ve...

CVE-2026-79839 HPE NonStop ODBC/MX Server - Memory corruption vulnerability

A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash...

CVE-2026-79839

A buffer overflow vulnerability exists in the HPE NonStop ODBC/MX Server (T7970), which can lead to memory corruption and an application crash . The vulnerability is reported as a Stack-based Buffer Overflow (CWE-120) with a CVSS 3.1 base score of 7.3 . Exploitation details are not provided. HPE ...

EUVD-2026-102092

A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash...

CVE-2026-79838

A buffer overflow vulnerability exists in HPE NonStop ODBC/MX Services , which can lead to memory corruption and a subsequent application crash . The affected component is specifically identified as ODBC/MX Services T7969 version T7969L40 and earlier . HPE has released fixes to address this issue...

CVE-2026-79838 HPE NonStop ODBC/MX Services - Memory corruption vulnerability

A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash...

EUVD-2026-102091

A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash...

Security Bulletin: IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities due to Apache MyFace (CVE-2026-68536, CVE-2026-76646)

Summary There are vulnerabilities in the Apache MyFace library that affects IBM WebSphere Application Server and WebSphere Application Server Liberty when jsf-2.0, jsf-2.2, jsf-2.3, faces-3.0, faces-4.0 or faces-4.1 is enabled. Vulnerability Details CVEID:CVE-2026-76646 DESCRIPTION: A remote...

Security Bulletin: Security Vulnerability identified in reactor-core-3.7.11.jar used by IBM Maximo Application Suite - MREF

Summary There is a vulnerability in reactor-core-3.7.11.jar used by IBM Maximo Application Suite - MREF Vulnerability Details CVEID:CVE-2026-47857 DESCRIPTION: In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Servic...

Security Bulletin: Security Vulnerability identified in Spring - 6.2.19 used by IBM Maximo Application Suite - MREF

Summary There is a vulnerability in Spring-6.2.19 used by IBM Maximo Application Suite - MREF Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering,...

CVE-2020-15227

CVE-2020-15227 DISCLAIMER! I take no responsibility of using it in wild life environment so please do NOT do it. This thingy is just to demonstrate and for test things for sysadmins This tool tests for vulnerability in nette/application. How to fix the vulnerability Composer Update dependency to...

CVE-2026-39989

A server-side request forgery SSRF vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following version: Download Station 5.10.1.312...

CVE-2026-39989

A server-side request forgery (SSRF) vulnerability affects QNAP Download Station . An attacker who has obtained a valid user account can exploit this flaw to read application data . Remediation is available in Download Station 5.10.1.312 and 5.11.2.321 and later versions. No specific exploit info...

CVE-2026-39989 SSRF in QNAP Download Station

A server-side request forgery SSRF vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following version: Download Station 5.10.1.312...

EUVD-2026-101977

A server-side request forgery SSRF vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following version: Download Station 5.10.1.312...

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Business Automation Workflow

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow. Information about security vulnerabilities affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

Apache OFBiz - Remote Code Execution

Apache OFBiz below 18.12.16 is vulnerable to unauthenticated remote code execution on Linux and Windows. An attacker with no valid credentials can exploit missing view authorization checks in the web application to execute arbitrary code on the server id: CVE-2024-45507 info: name: Apache OFBiz -...

MOVEit Transfer - SQL Injection

In Progress MOVEit Transfer before 2020.1.11 12.1.11, 2021.0.9 13.0.9, 2021.1.7 13.1.7, 2022.0.7 14.0.7, 2022.1.8 14.1.8, and 2023.0.4 15.0.4, a SQL injection vulnerability has been identified in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain unauthorized...