44039 matches found
The vulnerability of the Event Management component of the Oracle Enterprise Manager Base Platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Event Management component of the Oracle Enterprise Manager Base Platform is related to the lack of authentication for a critical function. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and...
The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Content Server component of the Oracle WebCenter Content user interaction platform is related to access control errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
The vulnerability of the Generic Unix Connector component in the Oracle Identity Manager Connector software suite for managing user accounts and access rights allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Generic Unix Connector component in the Oracle Identity Manager Connector software suite for managing user accounts and access rights is related to access control errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, a...
GHSA-55CM-P4WW-685G Duplicate Advisory: Hono missing validation of cookie name on write path in setCookie()
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-26pp-8wgv-hjvm. This link is maintained to preserve external references. Original Description Hono before 4.12.12 does not validate cookie names on the write path in the setCookie, serialize, and serializeSigned...
CVE-2026-56762 Hono - Missing Cookie Name Validation in setCookie()
Hono before 4.12.12 does not validate cookie names on the write path in the setCookie, serialize, and serializeSigned functions, allowing invalid characters such as control characters e.g. \r or \n when an application passes a user-controlled cookie name. This can produce malformed Set-Cookie...
Important: Red Hat Security Advisory: Assisted Installer RHEL 8 components for Multicluster Engine for Kubernetes 2.6.12
Assisted installer RHEL 8 components for the multicluster engine for Kubernetes 2.6.12 General Availability release, with updates to container images. Assisted Installer RHEL 8 integrates components for the general multicluster engine for Kubernetes 2.6.12 release that simplify the process of...
CVE-2026-10521
An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a total loss of confidentiality, integrity and availability...
CVE-2026-10521
An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a total loss of confidentiality, integrity and availability...
EUVD-2026-38422
An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a total loss of confidentiality, integrity and availability...
OPENSUSE-SU-2026:11106-1 asn1c-0.9.29-1.1 on GA media
These are all security issues fixed in the asn1c-0.9.29-1.1 package on the GA media of openSUSE Tumbleweed...
ghc-crypton-asn1-types-0.4.1-1.1 on GA media (moderate)
ghc-crypton-asn1-types-0.4.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11080-1 Rating: moderate Cross-References: CVE-2026-9648 CVSS scores: CVE-2026-9648 SUSE : 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...
CVE-2026-10521: Direct Request
An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a total loss of confidentiality, integrity and availability...
PT-2026-51480
An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a total loss of confidentiality, integrity and availability...
OPENSUSE-SU-2026:11110-1 nodejs26-26.3.1-1.1 on GA media
These are all security issues fixed in the nodejs26-26.3.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11114-1 gvim-9.2.0530-1.1 on GA media
These are all security issues fixed in the gvim-9.2.0530-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11105-1 apache-commons-validator-1.10.1-1.1 on GA media
These are all security issues fixed in the apache-commons-validator-1.10.1-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2023-45796: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 and PMI v8xx up to and including 2.0.33992 allows a low-privileged remote unauthenticated attacker to manipulate process data with potential impact on integrity and/or availability...
PT-2026-52075
Name of the Vulnerable Software and Affected Versions hamlib versions prior to 4.7.2 Description Multiple security issues exist in the rigctld component. A stack out-of-bounds write and uninitialized memory access occur within the send raw function. Additionally, a stack/heap overflow primitive i...