278000 matches found
ROS-20261008-73-0174
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-107929
Name of the Vulnerable Software and Affected Versions Visual Composer Website Builder versions prior to 45.16.3 Description An issue exists in the Visual Composer Website Builder where missing authorization allows the exploitation of incorrectly configured access control security levels...
CVE-2026-94584: Concurrent Execution using Shared Resource with Improper Synchronization
A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. When handling user authentication requests across a multi-threaded execution pool, this race condition causes PAM modules to process stale or incorrect client IP...
ROS-20261008-73-0277
The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
PT-2026-107911
Missing Authorization vulnerability in YITH YITH WooCommerce Product Bundles yith-woocommerce-product-bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Product Bundles: from n/a through 2.29.0...
ROS-20261008-73-0171
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2026-107927
Name of the Vulnerable Software and Affected Versions Event Tickets versions prior to 5.30.0.1 Description Missing authorization allows the exploitation of incorrectly configured access control security levels. Recommendations Update Event Tickets to version 5.30.0.1 or later...
ROS-20261008-73-0186
The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
PT-2026-108181
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2.2 Description Sensitive credential material is exposed during the rotation processing of SECRET and API KEY. The edge-controller and edge-manager components log this information at the INFO level. An...
ROS-20261008-73-0182
The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-104659: Origin Validation Error
Missing Host header validation and missing throttling of failed administrator sign-ins in the REST API listener of Progressive Robot hMailServer 6.0.0 through 6.3.5 allow a remote attacker to brute-force the server administrator's password through the administrator's own browser by DNS rebinding...
PT-2026-134943
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
Red Hat Openshift permission and access control issues vulnerability
Red Hat Openshift version 4 contains a vulnerability related to permission and access control issues. This vulnerability arises because the insights-operator-gather ClusterRole fails to restrict namespace or resourceNames, thereby granting service accounts the ability to read Secrets within core...
ROS-20261008-73-0032
The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
ROS-20261008-73-0247
The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20261008-73-0176
The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...
EulerOS 2.0 SP15 : unbound (EulerOS-SA-2026-4021)
According to the versions of the unbound packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'viewlocaldata' and 'viewlocaldatas' commands of 'unbound-control' create a bare loca...
PT-2026-108102
Name of the Vulnerable Software and Affected Versions Malcolm affected versions not specified Description An inconsistency in URL path normalization exists between the Lua-based role-based access control RBAC authorization layer and the nginx request routing logic in the reverse proxy. An...