132554 matches found
GNUnet P2P Framework 0.26.2
GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...
CVE-2026-84239
IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability caused by improper neutralization of special elements in an SQL command. A remote authenticated attacker with high privileges can exploit this to obtain sensitive information, with high confidentiality impact and low a...
EUVD-2026-83358
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
EUVD-2026-83357
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper neutralization of special elements used in an SQL command...
CVE-2026-84086
CVE-2026-84086 affects IBM Guardium Data Protection 12.2 and is a path traversal vulnerability (CWE-22) caused by improper limitation of a pathname to a restricted directory. A remote authenticated attacker with high privileges can exploit this to execute arbitrary code , resulting in high impact...
EUVD-2026-83428
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...
CVE-2026-84074
IBM Guardium Data Protection 12.2 is vulnerable to cross-site scripting (CWE-79) due to improper neutralization of input during web page generation. A remote authenticated attacker with low privileges can exploit this to execute arbitrary code, with changed scope (cross-origin impact) and high im...
CVE-2026-84073
IBM Guardium Data Protection 12.2 is affected by a SQL injection flaw (CWE-89) that allows a remote authenticated attacker to execute arbitrary SQL commands through improper neutralization of special elements in an SQL command. The CVSS 3.1 score is 9.1 (CRITICAL) with a changed scope , indicatin...
CVE-2026-84064
IBM Guardium Data Protection 12.2 is vulnerable to SQL injection (CWE-89) caused by improper neutralization of special elements used in an SQL command. A remote authenticated attacker can execute arbitrary SQL commands, leading to high impact on confidentiality, integrity, and availability. The C...
CVE-2026-84031
IBM Guardium Data Protection 12.2 is vulnerable to a Cross-site Scripting (CWE-79) flaw caused by improper neutralization of input during web page generation. A remote authenticated attacker could exploit this to execute arbitrary code on the affected appliance, with changed scope impacting confi...
CVE-2026-82896
IBM Guardium Data Protection 12.2 is affected by a path traversal vulnerability (CWE-22) that allows a remote authenticated attacker to traverse directories on the system. The vulnerability carries a CVSS 3.1 score of 7.6 (HIGH) with low confidentiality impact, high integrity impact, and low avai...
CVE-2026-82887
IBM Guardium Data Protection 12.2 is vulnerable to OS command injection due to improper neutralization of special elements used in an OS command. A remote authenticated attacker (low privileges required) can execute arbitrary commands, leading to high impact on confidentiality, integrity, and ava...
EUVD-2026-83303
IBM Guardium Data Protection 12.2 could allow an authenticated user to execute arbitrary commands with low user privileges on the system due to improper validation of user supplied input...
EUVD-2026-83300
IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header...
EUVD-2026-83299
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands...
CVE-2026-11725
IBM MQ queue manager is vulnerable to an integer overflow (CWE-190) in MQINQ request validation , allowing an authenticated attacker to cause a denial of service or potentially execute arbitrary code. The affected versions span IBM MQ 9.1 LTS through 10.0.0.0 (Server component) and IBM MQ Applian...
EUVD-2026-83289
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster migration data...
EUVD-2026-83051
Convoy is a cloud native webhooks gateway. Prior to 26.6.8, Convoy's GET /api/v1/projects/projectID/sources/sourceID endpoint authorizes access to the project in the URL, but Handler.GetSource calls sources.Service.FindSourceByID and fetches the Source only by sourceID without confirming that its...
