33407 matches found
EUVD-2026-58462
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking...
EUVD-2026-58403
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read...
EUVD-2026-58388
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform unauthorized operations and access sensitive information due to improper session management...
EUVD-2026-58372
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
EUVD-2026-58369
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...
EUVD-2026-58235
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop...
EUVD-2026-58194
TypeORM is a TypeScript and JavaScript ORM for Node.js that supports PostgreSQL, MySQL, MariaDB, SQLite, SQL Server, Oracle, and other databases. Prior to versions 0.3.31 and 1.1.0, typeorm migration:generate embeds database schema metadata into JavaScript or TypeScript template literals in...
EUVD-2026-58127
Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...
EUVD-2026-58124
Webhook Authorization Header Returned in Plaintext via API...
EUVD-2026-58156
Release attachment extension allowlist bypass via web release edit form variant of CVE-2025-68939...
EUVD-2026-58151
Fork-PR Actions task can read a third private repository via the collaborative-owner branch missing fork-PR guard...
EUVD-2026-58149
Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs...
EUVD-2026-58146
Denial of Service CPU & Memory Exhaustion via ON^2 String Concatenation in Debian Package Upload...
EUVD-2026-58144
Gitea SSH Key Parser Denial of Service...
EUVD-2026-58034
rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --temp-dir or --link-dest options. The rename-confinement logic is bypassed when these options resolve to paths outside t...
EUVD-2026-58094
rsync tbefore 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferred files to be owned by root by influencing name-converter responses to return empty values. When the name-converter subprocess returns a...
EUVD-2026-57917
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arraytics Booktics allows Blind SQL Injection. This issue affects Booktics: from n/a through 1.0.22...
EUVD-2026-57913
Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce 4.22.10 versions...