4381 matches found
CVE-2026-51026
Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request...
CVE-2026-51026
Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request...
PT-2026-61619
Name of the Vulnerable Software and Affected Versions FileThingie version 2.5.7 Description A directory traversal issue allows a remote attacker to obtain sensitive information by sending a crafted request. Directory traversal is a flaw that allows an attacker to access files and directories stor...
CVE-2026-9171
IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...
EUVD-2026-45250
IBM PowerVM Novalink are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...
CVE-2026-9171 Vulnerabilities in IBM WebSphere Application affects IBM PowerVM Novalink.
IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...
CVE-2026-59695 Unbounded max_fee_per_gas in mpp Tempo fee-payer enables single-request wallet drain
Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet in a single request by naming an arbitrarily high gas price. When the mpp Elixir library is configured as fee payer feepayer: true,...
PT-2026-60837
Name of the Vulnerable Software and Affected Versions IBM PowerVM Novalink affected versions not specified Description IBM PowerVM Novalink is susceptible to a denial of service. A remote attacker can send a specially-crafted request that causes the server to exhaust memory resources...
Grafana OnCall Authentication Bypass Code Execution
The vulnerability of the Grafana OnCall notification system is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to trigger service failures or execute arbitrary code by sending a specially crafted POST request...
CVE-2026-61389
An out-of-bounds write vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption via a crafted IOCTL request, potentially resulting in privilege escalation or system instability...
Security Bulletin: Vulnerabilities in IBM WebSphere Application (CVE-2026-50645, CVE-2026-9322, CVE-2026-11541, CVE-2026-4410, CVE-2026-9320, CVE-2026-8646, CVE-2026-11806, CVE-2026-9071, CVE-2026-11546, CVE-2026-5516) affects IBM PowerVM Novalink.
Summary IBM WebSphere Libery Profile is used by IBM PowerVM Novalink. IBM PowerVM Novalink has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2026-50645 DESCRIPTION: There is no restriction on the amount of attachment headers that a message can contain when being deserialized by...
Remote Code Execution
YouTransfer is vulnerable to Remote Code Execution. The vulnerability is due to an issue in the sendmail transport integration component, where attackers can execute arbitrary code via supplying a crafted request...
EUVD-2026-44844
Cross Site Scripting vulnerability in xxl-job-admin v.3.0.0 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request containing a malicious script...
PT-2026-60577
An out-of-bounds read vulnerability in the Productivity Suite allows a local attacker to trigger kernel memory corruption by sending a crafted IOCTL request. This could lead to limited information disclosure or disruption of the affected product...
CVE-2026-20146
A vulnerability in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating system to either read or delete arbitrary files. To exploit this vulnerability, the...
SUSE CVE-2026-57584
Phalcon is a high-performance, full-stack PHP framework. Prior to 5.15.0, every Phalcon MVC application built with a default router registers a built-in route whose compiled PCRE pattern contains the nested quantifier /., and the same construct is produced by the /:params placeholder and the CLI...
CVE-2026-15029
Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests to the driver, bypassing OS-enforced memory protection...
CVE-2026-26719
A stored Cross-Site Scripting (XSS) vulnerability exists in xxl-job-admin (versions prior to 3.4.0 ) within the JobInfoController.java component. The root cause is that the addressList parameter accepts unsanitized URL-encoded JavaScript . An attacker can submit a malicious payload via a crafted ...