304124 matches found
EUVD-2026-85569
A vulnerability has been found in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. This vulnerability affects unknown code of the file ssmpro/src/main/java/cn/sfturing/service/impl/CommonUserServiceImpl.java. Such manipulation leads to cleartext storage of sensitive information...
CVE-2026-96549
A vulnerability exists in sfturing hosp_order (up to commit 627f426331da8086ce8fff2017d65b1ddef384f8 ) affecting the file ssm_pro/src/main/java/cn/sfturing/service/impl/CommonUserServiceImpl.java . The issue allows for the cleartext storage of sensitive information through code manipulation. This...
CVE-2026-96549 sfturing hosp_order CommonUserServiceImpl.java cleartext storage
A vulnerability has been found in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. This vulnerability affects unknown code of the file ssmpro/src/main/java/cn/sfturing/service/impl/CommonUserServiceImpl.java. Such manipulation leads to cleartext storage of sensitive information...
CVE-2026-75131
A flaw was found in NetworkManager-l2tp. This privilege escalation vulnerability allows local users, who have permissions to create VPN connections, to execute arbitrary code as root. This is achieved by injecting options into the pppd Point-to-Point Protocol Daemon through a specially crafted VP...
CVE-2026-59990 Jawn: Uncontrolled nesting depth in JSON parser
Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a remote attacker who can submit untrusted JSON to grow parser contexts until the JVM heap is exhausted. The resulting...
CVE-2026-59990 Jawn: Uncontrolled nesting depth in JSON parser
Jawn is an open source JSON parser. Prior to 1.7.0, Jawn parse methods accept arbitrarily deep JSON array and object nesting without a depth limit, allowing a remote attacker who can submit untrusted JSON to grow parser contexts until the JVM heap is exhausted. The resulting...
USN-8287-2 xdg-desktop-portal regression
USN-8287-1 fixed a vulnerability in XDG Desktop Portal. Unfortunately the fix for CVE-2026-40354 was incomplete and introduced a regression when trashing files. This update fixes the problem and provides the corresponding update for Ubuntu 26.04 LTS. We apologize for the inconvenience. Original...
USN-8287-2: XDG Desktop Portal regression
USN-8287-1 fixed a vulnerability in XDG Desktop Portal. Unfortunately the fix for CVE-2026-40354 was incomplete and introduced a regression when trashing files. This update fixes the problem and provides the corresponding update for Ubuntu 26.04 LTS. We apologize for the inconvenience. Original...
CVE-2026-82368
Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches...
CVE-2026-82368
Brocade SANnav versions before 3.0.1a are susceptible to insecure access controls on internal service ports. This vulnerability allows local, non-administrative host users to communicate directly with backend management services. A local attacker can exploit this exposed access to transmit comman...
EUVD-2026-85553
Insecure access controls on internal service ports in Brocade SANnav versions before 3.0.1a allow local, non-administrative host users to communicate directly with backend management services. A local attacker can leverage this exposed access to transmit commands to connected Fabric OS switches...
CVE-2026-84486 Automation-controller: automation-controller-container: automation-controller: unauthenticated debug scheduler-trigger endpoints (allowany, routed without debug guard) allow advisory-lock starvation of job dispatch (dos)
A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Four debug views that trigger the internal task, dependency, and workflow schedulers are configured to allow any user including unauthenticated clients and are routed in production builds because their URL include i...
CVE-2026-84486 Automation-controller: automation-controller-container: automation-controller: unauthenticated debug scheduler-trigger endpoints (allowany, routed without debug guard) allow advisory-lock starvation of job dispatch (dos)
A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Four debug views that trigger the internal task, dependency, and workflow schedulers are configured to allow any user including unauthenticated clients and are routed in production builds because their URL include i...
CVE-2026-96548 sfturing hosp_order jdbc.properties hard-coded credentials
A flaw has been found in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects an unknown part of the file ssmpro/src/main/resources/jdbc.properties. This manipulation causes hard-coded credentials. It is possible to initiate the attack remotely. The attack's complexity ...
EUVD-2026-85544
A flaw has been found in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects an unknown part of the file ssmpro/src/main/resources/jdbc.properties. This manipulation causes hard-coded credentials. It is possible to initiate the attack remotely. The attack's complexity ...
CVE-2026-96548 sfturing hosp_order jdbc.properties hard-coded credentials
A flaw has been found in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. This affects an unknown part of the file ssmpro/src/main/resources/jdbc.properties. This manipulation causes hard-coded credentials. It is possible to initiate the attack remotely. The attack's complexity ...
CVE-2026-96548
A flaw in sfturing hosp_order (up to commit 627f426331da8086ce8fff2017d65b1ddef384f8) involves an issue within the ssm_pro/src/main/resources/jdbc.properties file. This manipulation results in hard-coded credentials that can be accessed via a remote attack vector. While the attack complexity is r...
USN-8809-1 libgit2 vulnerability
Kazuma Matsumoto and Isabel Mill discovered that libgit2 incorrectly handled certain repository URLs when using the SSH transport. A remote attacker could possibly use this issue to execute arbitrary commands...