115529 matches found
CVE-2026-14532: Integer Overflow or Wraparound
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception...
PT-2026-111131
Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP affected versions not specified Description Applications based on SAP GUI for HTML do not sufficiently sanitize user-supplied content in certain functionality. This allows an authenticated attacker to send...
PT-2026-111136
Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence versions 15.4 through 15.5 Description SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within the Configuration Service. An attacker with MII...
CVE-2026-95696: Uncontrolled Resource Consumption
IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception...
PT-2026-113391
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 Description An unauthenticated remote attacker can bypass access controls configured on gRPC service methods. gRPC is a high-performance remote procedure call...
PT-2026-113393
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.10 Description An authentication bypass flaw exists when the samlWeb-2.0 feature is enabled. This issue allows unauthenticated remote attackers to bypass enterprise...
CVE-2026-106035: Insertion of Sensitive Information into Log File
An Information Exposure Through Log Files vulnerability in Ivanti Xtraction Cloud Sync before version 2026.4 allows a remote authenticated attacker to disclose partial SQL database passwords through application log...
UBUNTU-CVE-2026-70162
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application...
Microsoft Visual Studio: CVE-2026-70162: .NET Denial of Service Vulnerability
A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...
PT-2026-113368
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 Description A privilege escalation issue exists when the restConnector-2.0 feature is enabled. Recommendations At the moment, there is no information about a newer...
CVE-2026-101294: Missing Cryptographic Step
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature...
Cisco Application Policy Infrastructure Controller Web Interface Command Execution
The vulnerability of the Cisco Application Policy Infrastructure Controller APIC web interface management interface is related to the lack of a standardized mechanism for error handling. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...
PT-2026-111425
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description Privilege escalation exists within the Application Update component. Recommendations Update...
Mozilla Thunderbird < 158.0
The version of Thunderbird installed on the remote Windows host is prior to 158.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-109 advisory. - Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1. CVE-2026-10601...
CVE-2026-72955: Use After Free
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-72955: Windows Application Compatibility Cache Elevation of Privilege Vulnerability
Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally...
Elixirgrpc Algorithmic Complexity DoS
The vulnerability of the Elixirgrpc programming language’s web application development library is related to its algorithmic complexity. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
CVE-2026-93891
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to an XML external entity XXE injection flaw...