115506 matches found
PT-2026-111576
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 Description An authenticated attacker can bypass authorization, which may lead to administrative impersonation across the cell. Recommendations At the moment, there is no information about ...
PT-2026-113393
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.10 Description An authentication bypass flaw exists when the samlWeb-2.0 feature is enabled. This issue allows unauthenticated remote attackers to bypass enterprise...
PT-2026-113391
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 Description An unauthenticated remote attacker can bypass access controls configured on gRPC service methods. gRPC is a high-performance remote procedure call...
CVE-2026-106035: Insertion of Sensitive Information into Log File
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log...
PT-2026-111136
Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence versions 15.4 through 15.5 Description SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within the Configuration Service. An attacker with MII...
Microsoft Visual Studio: CVE-2026-70162: .NET Denial of Service Vulnerability
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...
PT-2026-113368
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 Description A privilege escalation issue exists when the restConnector-2.0 feature is enabled. Recommendations At the moment, there is no information about a newer...
CVE-2026-105443: Improper Access Control
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install...
CVE-2026-109704: Improper Privilege Management
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...
UBUNTU-CVE-2026-70162
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application...
CVE-2026-72955: Use After Free
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally...
Mozilla Thunderbird < 153.5
The version of Thunderbird installed on the remote Windows host is prior to 153.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-110 advisory. - Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Firefox ESR...
PT-2026-111425
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description Privilege escalation exists within the Application Update component. Recommendations Update...
Mozilla Thunderbird < 158.0
The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 158.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-109 advisory. - Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1...
Mozilla Thunderbird < 158.0
The version of Thunderbird installed on the remote Windows host is prior to 158.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-109 advisory. - Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1. CVE-2026-10601...
Cisco Application Policy Infrastructure Controller Web Interface Command Execution
The vulnerability of the Cisco Application Policy Infrastructure Controller APIC web interface management interface is related to the lack of a standardized mechanism for error handling. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...
CVE-2024-7124
CVE-2024-7124 Reflected XSS in DInGO dLibra from 6.0 = 6.3.20 Improper Neutralization of Input During Web Page Generation vulnerability in DInGO dLibra software in the parameter 'filter' in the endpoint 'indexsearch' allows a Reflected Cross-Site Scripting XSS. An attacker might trick somebody in...
CVE-2026-93892
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response...