94396 matches found
CVE-2026-18175: Improper Authorization
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to manipulate database transactions due to improper authorization in the DDM target dispatcher...
CVE-2026-53932: Improper Neutralization of Special Elements used in a Command
laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during database restore. This issue has been patched in version 1.9.4...
SiYuan: Missing publish-access filter on getAttributeViewKeysByID discloses database column schema, plus two unscoped block-ID enumeration oracles (publish mode)
CVE: This vulnerability corresponds to CVE-2026-72800. Summary POST /api/av/getAttributeViewKeysByID returns a database's full column schema with no publish-access filtering, while its sibling getAttributeViewKeys applies the filter for reader sessions. Two further endpoints,...
CVE-2026-69857 Azure Cosmos DB Spoofing Vulnerability
...
SiYuan: Password (protected) tier omitted in the attribute-view/database publish filter: Reader receives rows of protected documents without the password (publish mode)
CVE: This vulnerability corresponds to CVE-2026-72806. Summary FilterViewByPublishAccess, the filter renderAttributeView applies for Reader sessions drops rows using only the hidden/forbidden check and never checks the publish password. Its three sibling filters all check both tiers. As a result,...
CVE-2026-85453 MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross-Site Scripting
MOOS core-moos through 10.4.0 fails to escape database contents when rendering MOOSDB HTTP pages, allowing attackers to inject malicious scripts. Any MOOS publisher can set variable values containing script payloads that execute in the browser of operators viewing the web interface...
CVE-2026-85424 MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEAR
MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. Attackers can bypass the compile-time protocol string check and connect with arbitrary client names to execute privileg...
GHSA-FPH3-GHQ9-VW66 SiYuan: Unauthenticated SQL execution and REGEXP injection via fullTextSearchAssetContent (publish mode): reader-reachable raw SQL (method 2) and unescaped REGEXP (method 3) on read-write asset-content DB
CVE: This vulnerability corresponds to CVE-2026-69083. Summary The /api/search/fullTextSearchAssetContent endpoint exposes two SQL flaws on the asset-content database, both reachable by the publish RoleReader token and by the anonymous account when Publish.Auth.Enable is false: 1. method 2 passes...
SiYuan: Unauthenticated SQL execution and REGEXP injection via fullTextSearchAssetContent (publish mode): reader-reachable raw SQL (method 2) and unescaped REGEXP (method 3) on read-write asset-content DB
CVE: This vulnerability corresponds to CVE-2026-69083. Summary The /api/search/fullTextSearchAssetContent endpoint exposes two SQL flaws on the asset-content database, both reachable by the publish RoleReader token and by the anonymous account when Publish.Auth.Enable is false: 1. method 2 passes...
GHSA-73WF-GQ98-2V4G vulnerabilities
Vulnerabilities for packages: kubeflow-katib, ts-patch, langfuse, jupyter-base-notebook, vitess, argo-workflows...
GHSA-FPH4-WMHF-6FWF vulnerabilities
Vulnerabilities for packages: prism, vitess, jupyter-base-notebook, tileserver-gl, yaml-language-server, argo-workflows, opensearch-dashboards...
CVE-2026-81521
A flaw was found in the MongoDB Go Driver. The Client.BulkWrite operation does not properly validate database names, allowing a specially crafted name with reserved characters to redirect write operations. This vulnerability could enable an attacker to modify or corrupt data in unintended databas...
ManageEngine PAM360 < Build 8561 SQLi (CVE-2026-14828)
According to its self-reported build number, the ManageEngine PAM360 application running on the remote host is prior to build 8561. It is, therefore, affected by an authenticated SQL injection vulnerability. An authenticated, remote attacker can exploit this by crafting a malicious query to execu...
After Veeam ONE 13.1.0.7034 Upgrade: No connection could be made because the target machine actively refused it. (localhost:2743)
Article Applicability The issue described in this article only occurs for deployments in which Veeam ONE was installed to a folder other than the default C:\Program Files\Veeam\Veeam ONE\ path. Challenge After Veeam ONE is upgraded to version 13.1 build 13.1.0.7034, reports cannot be generated an...
Linux Distros Unpatched Vulnerability : CVE-2026-65140
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - slurm-wlm - None Ubuntu Linux - Fix a privilege escalation where an operator could alter Administrator accounts through the accounting database...
FreeBSD : jenkins -- multiple vulnerabilities (102bc631-a6da-11f1-ba21-00e0edd85c6a)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 102bc631-a6da-11f1-ba21-00e0edd85c6a advisory. Jenkins Security Advisory 2026-09-02: Tenable has extracted the preceding description block...
CVE-2026-84962: Improper Neutralization of CRLF Sequences
An unauthorized user with key vault write access may cause an authorized client to issue arbitrary authenticated Google Cloud KMS API calls under the authorized user's identity, escalating database-level access into cloud key control and defeating client-side encryption...
UBUNTU-CVE-2026-65140
Fix a privilege escalation where an operator could alter Administrator accounts through the accounting database...
