179772 matches found
CVE-2026-17101 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...
CVE-2026-17101 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...
CVE-2026-17101
CVE-2026-17101 is an improper authentication vulnerability (CWE-287) in Navigator for i on IBM i versions 7.3, 7.4, 7.5, and 7.6. A remote attacker with no prior privileges but requiring user interaction can execute arbitrary code or obtain sensitive information, with changed scope and high impac...
CVE-2026-17101
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...
EUVD-2026-58399
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication...
CVE-2026-73491 vulnerabilities
Vulnerabilities for packages: ruby4.0-rails, ruby3.2-rails, pghero-fips, gitlab-rails-ce-fips, ruby3.3-rails, pghero, gitlab-rails-ce, ruby3.4-rails...
CVE-2026-17099
CVE-2026-17099 affects IBM i 7.3–7.6 and could allow a remote attacker to obtain sensitive information due to improper authentication. The IBM advisory lists Navigator for i as the affected component with a base CVSS v3.1 score of 7.3 (Network, Low attack complexity, None privileges, Confidential...
CVE-2026-17099
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...
EUVD-2026-58398
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...
CVE-2026-17099 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...
CVE-2026-17099 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...
CVE-2026-73418 vulnerabilities
Vulnerabilities for packages: langfuse-fips, jitsucom-jitsu, langfuse...
CVE-2026-17074 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management...
CVE-2026-17074
CVE-2026-17074 affects IBM i versions 7.6, 7.5, 7.4, and 7.3 in the DRDA/DDM (Distributed Relational Database Architecture / Distributed Data Management) component. The root cause is improper privilege management (CWE-269), allowing a remote authenticated attacker to bypass security restrictions....
CVE-2026-73655
Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. Prior to 4.5.2, addGoogleStrategy in apps/webapp/app/services/googleAuth.server.ts passes a Google profile email to findOrCreateGoogleUser in apps/webapp/app/models/user.server.ts without requiring Google'...
CVE-2026-72643
Kibana Agent Builder determines whether a caller owns a private agent by comparing a stable user identifier when one is recorded, and falling back to a comparison of the username when it is not. A username is not unique across Elasticsearch authentication realms, so two distinct principals that...
CVE-2026-17223
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow...
CVE-2026-18164
An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication. This allows an attacker within Bluetooth range to arbitrarily manipulate brain stimulation parameters and state...