CVE-2026-48022 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-CR32-G25G-VXJJ vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-2092 vulnerabilities

Vulnerabilities for packages: keycloak...

GHSA-WMXR-6J5F-838P vulnerabilities

Vulnerabilities for packages: keycloak...

CVE-2026-40686 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2026-66140 vulnerabilities

Vulnerabilities for packages: exim...

CVE-2022-41404 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2026-54089 vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2021-37136 vulnerabilities

Vulnerabilities for packages: druid...

GHSA-5QXF-W5V2-M3RG vulnerabilities

Vulnerabilities for packages: exim...

GHSA-F965-GHFW-X6JX vulnerabilities

Vulnerabilities for packages: exim...

GHSA-XQP3-JQ6G-X3QM vulnerabilities

Vulnerabilities for packages: filebrowser...

CVE-2026-55832 vulnerabilities

Vulnerabilities for packages: ascan...

CVE-2026-75628

Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because sameoriginpath accepts a backslash or tab in the return parameter. oauth2login reads the return parameter from the initiation request, runs sameoriginpath over it, and stores the survivor in...

EUVD-2026-63189

Punk::OAuth2 versions before 0.03 for Perl allow an attacker-chosen off-site redirect after login because sameoriginpath accepts a backslash or tab in the return parameter. oauth2login reads the return parameter from the initiation request, runs sameoriginpath over it, and stores the survivor in...

CVE-2026-75628

The Punk::OAuth2 Perl module (versions before 0.03 ) is vulnerable to an unauthorized off-site redirect following authentication. The root cause lies in the same_origin_path function, which fails to reject backslashes or tabs in the return parameter of the oauth2_login initiation request. Because...

EUVD-2026-62948

In versions below 1.0.5 of the RSA SecurID Authentication Manager app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive token serial by invoking either the enable token or revoke token action, because the action's tokenserial parameter is not masked...

EUVD-2026-62920

In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the information contained in Edge Processor pipeline configurations through a Representational State Transfer REST API endpoint when Edge Processor is turned on. The vulnerability does not affect versions prio...

EUVD-2025-210745

IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial of service...

CVE-2026-19586: Improper Neutralization of Special Elements used in an OS Command

A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to operate as an OpenVPN Server due to insufficient validation of client-supplied data during OpenVPN connection establishment. An unauthenticated remote attacker may provide specially crafted...