CVE-2022-41404 vulnerabilities

Vulnerabilities for packages: druid...

GHSA-F965-GHFW-X6JX vulnerabilities

Vulnerabilities for packages: exim...

GHSA-5QXF-W5V2-M3RG vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-40686 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-66140 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-54089 vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2021-37136 vulnerabilities

Vulnerabilities for packages: druid...

GHSA-XQP3-JQ6G-X3QM vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2026-55832 vulnerabilities

Vulnerabilities for packages: ascan...

CVE-2026-75628

Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because sameoriginpath accepts a backslash or tab in the return parameter. oauth2login reads the return parameter from the initiation request, runs sameoriginpath over it, and stores the survivor in...

EUVD-2026-63189

Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because sameoriginpath accepts a backslash or tab in the return parameter. oauth2login reads the return parameter from the initiation request, runs sameoriginpath over it, and stores the survivor in...

CVE-2026-75628

The Punk::OAuth2 Perl module (versions before 0.03 ) is vulnerable to an unauthorized off-site redirect following authentication. The root cause lies in the same_origin_path function, which fails to reject backslashes or tabs in the return parameter of the oauth2_login initiation request. Because...

EUVD-2026-62948

In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive token serial by invoking either the enable token or revoke token action, because the action's tokenserial parameter is not masked...

EUVD-2026-62920

In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the information contained in Edge Processor pipeline configurations through a Representational State Transfer REST API endpoint when Edge Processor is turned on. The vulnerability does not affect versions prio...

EUVD-2025-210745

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial of service...

PT-2026-78978

Name of the Vulnerable Software and Affected Versions Leyka versions prior to 3.32.4 Description Broken authentication exists for subscribers, allowing potential unauthorized access to accounts. Recommendations Update to a version newer than 3.32.3...

PT-2026-79270

Improper input validation and Exposure of sensitive information through data queries vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, and Genians Genian ZTNA V6.0 allows SQL Injection and Authentication Bypass. This issue affects Genian NAC V4.0: from 4.0.0 before 4.0.175Revisio...

PT-2026-79072

Name of the Vulnerable Software and Affected Versions dropbox samly versions 0.3.0 and later Description An authentication bypass exists where an attacker can authenticate as the subject of a captured SAML assertion by resubmitting it. This occurs because the function decode idp auth resp/3 in...

NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX696939)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is 13.1 prior to 13.1-63.21, or 14.1 prior to 14.1-73.32, or 13.1-FIPS/NDcPP prior to 13.1-37.277, or 14.1-FIPS prior to 14.1-73.32. It is, therefore, affected by multiple vulnerabilities: -...

PT-2026-79049

Name of the Vulnerable Software and Affected Versions WildFly Elytron affected versions not specified Description Password hashing and verification processes normalize input using Unicode NFKC Normalization Form Compatibility Composition, which can collapse fullwidth characters into their ASCII...