115494 matches found
CVE-2026-85298
An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project. This vulnerability was...
CVE-2026-73796
A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query...
EUVD-2026-101004
An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project. This vulnerability was...
CVE-2026-85298 Improper Authorization in Google Cloud Application Integration Leads to Privilege Escalation
An Incorrect Authorization vulnerability in the AuthConfig validation and integration execution runtime in Google Cloud Application Integration versions prior to 2026-08-27 allows an authenticated user to escalate privileges and impersonate a service account in the project. This vulnerability was...
CVE-2026-85298
The Google Cloud Application Integration service (versions prior to 2026-08-27 ) is vulnerable to an Incorrect Authorization vulnerability. The root cause exists in the AuthConfig validation and integration execution runtime , which allows an authenticated user to perform privilege escalation and...
CVE-2026-73796
A security vulnerability exists in HPE NonStop TSQLEXE (specifically version T9193L01^AIP and earlier, and T9193L02 ) that may result in an application crash when processing a crafted SQL query . This vulnerability is characterized as a memory corruption issue and can lead to Denial of Service (D...
CVE-2026-73796 HPE NonStop TSQLEXE - Memory Corruption vulnerability
A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query...
EUVD-2026-100991
A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query...
CVE-2026-73796 HPE NonStop TSQLEXE - Memory Corruption vulnerability
A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query...
Security Bulletin: IBM Maximo Application Suite is vulnerable to a sensitive information disclosure
Summary IBM Maximo Application Suite login service could allow an unauthenticated user to access sensitive system information. This bulletin contains information regarding the vulnerabilities and their fix. Vulnerability Details CVEID:CVE-2026-105052 DESCRIPTION: IBM Maximo Application Suite 8.10...
CVE-2026-14851
A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information PII and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised...
CVE-2026-14851
The Copart online billing service suffers from a vulnerability that leads to the unauthorised disclosure of information within its customer invoicing web application. The root cause is a lack of authorisation checks on the endpoint responsible for serving PDF invoice files , combined with certain...
EUVD-2026-100940
A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information PII and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised...
CVE-2026-105106
Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.pl handler accepts the jobid request parameter for op=cud-delete and passes it to C4::Scheduler::removeatjob without validating it. Schedule::At::remove substitutes the supplied job ID into an atrm...
SUSE CVE-2026-109704
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: tomcat (UTSA-2026-130097)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130097 advisory. Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service. This issue affects Apache...
PT-2026-113725
A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information PII and financial data – including customer names, addresses, invoice numbers, payment details and tax information – to unauthorised...
Linux Distros Unpatched Vulnerability : CVE-2026-93581
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - User-controlled values are not sufficiently neutralized when included in CSV exports. Values originating from user input, including data submitted by...