104 matches found
Security Bulletin: Vulnerability in Apache Log4j Core shipped in Tivoli Netcool/OMNIbus (CVE-2026-49844)
Summary The Netcool/Omnibus 'Administrator GUI' and 'Accelerated Event Notification GUI' desktop components use a version of Apache Log4j that contains a known vulnerability. This has been addressed. Vulnerability Details CVEID:CVE-2026-49844 DESCRIPTION: Improper encoding of non-finite...
CVE-2026-92789
Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects. Attackers with lookup table or event notification permissions can craft allowlisted endpoints that redirect to internal services, enabling the server ...
CVE-2026-92789 Graylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect
Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects. Attackers with lookup table or event notification permissions can craft allowlisted endpoints that redirect to internal services, enabling the server ...
Huawei HarmonyOS Permission Control Vulnerability
Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a permission control vulnerability. This vulnerability stems from issues with permission control in the event notification module. Attackers can exploit this...
Huawei HarmonyOS Permission Control Vulnerability (CNVD-2026-37868)
Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a permission control vulnerability, which stems from a flaw in the event notification module’s permission management. Currently, no detailed details about thi...
PT-2026-94066
Name of the Vulnerable Software and Affected Versions Graylog versions prior to 7.1.5 Description The software validates outbound URLs against an allowlist before making requests but fails to re-validate them after following HTTP redirects. Users with lookup table or event notification permission...
CVE-2026-92789: Server-Side Request Forgery (SSRF)
Graylog through 7.1.4 validates outbound URLs against an allowlist before making requests but fails to re-validate after following HTTP redirects. Attackers with lookup table or event notification permissions can craft allowlisted endpoints that redirect to internal services, enabling the server ...
CVE-2026-49310
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49311
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-74597
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49310
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2026-49310
CVE-2026-49310 is a permission control vulnerability in the event notification module affecting Huawei consumer devices , including phones, Vision, wearables, and laptops (per the September 2026 security bulletins). Successful exploitation may affect service confidentiality . The CVSS 3.1 score i...
EUVD-2026-74595
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49311
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49311
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49311
CVE-2026-49311 is a permission control vulnerability in the event notification module affecting Huawei consumer devices (phones, vision/wearables, and laptops). The CVSS 3.1 score is 6.2 (MEDIUM) with a local attack vector , low complexity , no privileges required , and no user interaction needed...
CVE-2026-49311: Undefined Security Weakness
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-49310: Undefined Security Weakness
Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...