172194 matches found
CVE-2026-47424: Protection Mechanism Failure
Open Access Management OpenAM is an access management solution. Prior to 16.1.1, GroovySandboxValueFilter permits an authenticated server-side script author to escape the scripting sandbox despite the default class allow and deny lists. A user such as a sub-realm RealmAdmin who can create or edit...
CVE-2026-85575: Improper Neutralization of Input During Web Page Generation
The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘shopengineproducttitleheadersize’ parameter in all versions up to, and including, 4.9.5 due to...
PT-2026-92136
Name of the Vulnerable Software and Affected Versions Jira Service Management Data Center versions 11.3.0 through 11.3.10 Description An improper authorization issue allows an authenticated attacker to gain unintended access to resources or functionality. This could lead to the exposure of...
PT-2026-92163
Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.6 through 19.1.7 GitLab CE/EE versions 19.2 through 19.2.5 GitLab CE/EE versions 19.3 through 19.3.1 Description An issue exists where an authenticated user could bypass SAML SSO sign-in restrictions and authenticate...
PT-2026-92087
Name of the Vulnerable Software and Affected Versions vikunja versions prior to 2.6.0 Description A resource exhaustion issue exists in the '/task-filter' endpoint. The system accepts deeply nested filter expressions without enforcing recursion depth limits. Authenticated attackers can provide...
PT-2026-92402
Concrete CMS 9 before 9.5.3 did not escape SQL LIKE wildcard characters in the keyword search filters used by the file manager, file folders, and page list, allowing an authenticated user with editor-level or higher privileges to submit a crafted search containing many single-character wildcards...
PT-2026-93197
Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in the mod qos bandwidth plan.json handling within filter conns dump cgi.c and IGD CgiCall.c. Authenticated users with broad roles can access these QoS read routes to obtain live network telemetry beyond...
EUVD-2026-79296
Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate price of shippable goods...
EUVD-2026-78864
OneNav v1.2.4 contains an authenticated arbitrary file deletion vulnerability in the Api::upload method in class/Api.php. An authenticated administrator can submit a non-HTML upload filename matching an existing file in the application's working directory. The application passes the user-controll...
PT-2026-92160
Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Business Automation affected versions not specified Description An authenticated user can embed arbitrary JavaScript code into the Web UI. This stored cross-site scripting issue allows for the alteration of intended...
CVE-2026-18424: Server-Side Request Forgery (SSRF)
Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote file import via cross-port reuse of a host's validated DNS pin. When multiple remote URLs share the same host, only the first ValidatedRemoteUrl is retained and reused for every later URL with that host. A...
CVE-2026-21588: Uncontrolled Resource Consumption
This High severity DoS Denial of Service vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to cause a...
PT-2026-92141
Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Business Automation versions 26.0.0 through 26.0.0 Interim Fix 001 IBM Cloud Pak for Business Automation versions 25.0.0 through 25.0.0 Interim Fix 005 IBM Cloud Pak for Business Automation versions 24.0.1 through 24.0.1...
CVE-2026-91925: Improper Neutralization of Special Elements Used in a Template Engine
Polyaxon through 2.16.4 renders operation specification fields with an unsandboxed Jinja2 environment during server-side run preparation, allowing authenticated users to execute arbitrary code. Attackers can submit runs with Jinja2 payloads in queue, namespace, conditions, presets, or dependencie...
CVE-2026-92237: Insertion of Sensitive Information into Log File
Insertion of sensitive information into log file in the slow query logging feature in Devolutions PowerShell Universal 2026.2.5 and earlier allows an authenticated user with log read permission to obtain application tokens, data protection key material and other stored credentials via SQL paramet...
PT-2026-92062
Crawl4AI before 0.9.3 contains a server-side request forgery vulnerability in PDFContentScrapingStrategy where get pdf path re-downloads targets with Python requests without egress validation. Authenticated attackers can supply URLs that redirect to internal addresses or use DNS rebinding to acce...
PT-2026-92031
An authenticated Server-Side Request Forgery SSRF in the /adminapi/file/online upload component of CRMEB v6.0.0 allows attackers to scan internal resources via a crafted POST request...
PT-2026-92386
Improper validation of the quantity parameter in the add-to-cart path of Webkul Bagisto v2.4.9 allows authenticated attackers to reduce their order total below the legitimate price of shippable goods...
PT-2026-92093
Name of the Vulnerable Software and Affected Versions Vikunja versions prior to 2.6.0 Description Authenticated users can cause a denial of service during data import because the system fails to limit archive expansion. An attacker can upload highly compressed files that expand to tens of gigabyt...
