17619 matches found
CVE-2026-39321
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.8.0-alpha.6 and 8.6.74, he login endpoint response time differs measurably depending on whether the submitted username or email exists in the database. When a user is not found, the...
CVE-2026-44288
A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. An attacker who can provide specially crafted protobuf binary data containing overlong UTF-8 Unicode Transformation Format - 8-bit byte sequences may be able to bypass application-level checks...
CVE-2026-8852
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module modfastcgi module...
CVE-2026-34184
Hydrosystem Control System does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directories and even execute some of them. Critically the attacker could run PHP scripts directly on the connected database.This issue was fixed in...
CVE-2026-3464
The WP Customer Area plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in the 'ajaxattachfile' function in all versions up to, and including, 8.3.4. This makes it possible for authenticated attackers with a role that an administrator...
CVE-2026-23824
Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may...
CVE-2026-23820
A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands in a restricted shell environment. Successful exploitation could allow an attacker to execute arbitrary commands on the underlyin...
GHSA-PXHF-QG7H-8X8M vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9...
GHSA-75HH-423H-RVWG vulnerabilities
Vulnerabilities for packages: openjdk, openjdk-26-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9...
CVE-2008-5344 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9...
CVE-2008-5353 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9...
GHSA-32MG-GG62-GFQ3 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9...
GHSA-99RJ-3595-5FRJ vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9...
GHSA-82JF-VH7J-48RV vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-25-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-21-openj9...
CVE-2026-33432
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions up to and including 8.2.8.2, when LDAP authentication is enabled, Roxy-WI constructs an LDAP search filter by directly concatenating the user-supplied login username into the filter string without...
CVE-2026-4857
IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned the Debug Pages Read Only capability or any custom capability with the ViewAccessDebugPage SPRight to incorrectly create new...
CVE-2026-8850
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module modibmupload...
CVE-2026-8633
IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to remote code execution in the Web Server Plug-ins, through a specially crafted request...
CVE-2026-8835
IBM HTTP Server 8.5, and 9.0 is vulnerable to invalid pointer dereference. A privileged user, authenticated to the Administration Server, could exploit this vulnerability to expose sensitive information or cause a denial of service...