68783 matches found
CVE-2026-18554
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...
CVE-2026-17182
CVE-2026-17182 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. It allows a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments (CWE-287). The vulnerability has a high impact: CVSS v3.1 base score 9.8 (...
CVE-2026-19639
An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope...
MINI-W34V-Q6JV-MC5R
Bulletin has no description...
CVE-2026-19639
CVE-2026-19639 is an Improper Access Control vulnerability affecting Tenable Security Center. The issue allows an authenticated non-administrative application user to view settings outside their assigned scope. Tenable’s advisory (TENABLE:20EF43...) indicates the fix is delivered with Security Ce...
EUVD-2026-58738
An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope...
CVE-2026-19639 Improper Access Control
An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope...
CVE-2026-19631 SQL Injection
A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials...
EUVD-2026-58733
A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials...
CVE-2026-19631
CVE-2026-19631 describes a SQL injection vulnerability in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries and access sensitive data, including credentials. Tenable’s advisory indicates Security Center 6.9.0 fixes multiple vulnerabilities and lists ...
MINI-8XVH-WMVP-RRXF
Bulletin has no description...
CVE-2025-6010
creationtimestamp| type| source ---|---|--- 2026-08-14 16:00:22+00:00| seen| https://t.me/devsecopsweekly/1310 2026-08-15 00:00:46+00:00| seen| https://t.me/devsecopsweekly/1310 2026-08-16 00:00:50+00:00| published-proof-of-concept| https://t.me/devsecopsweekly/1310...
MINI-QPM5-C5JR-XCPC
Bulletin has no description...
MINI-9RPW-6M96-HJ6G
Bulletin has no description...
MINI-X372-PHM6-WR4J
Bulletin has no description...
MINI-8GFR-F4QJ-4C5J
Bulletin has no description...
MINI-4V59-G4V5-G4C8
Bulletin has no description...
MINI-8FWP-5G6P-4FXR
Bulletin has no description...
CVE-2026-70631
A flaw was found in FFmpeg. An attacker can exploit an uninitialized heap memory disclosure vulnerability in the native TIFF decoder by providing a specially crafted TIFF file. This crafted file can cause the tiffunpackzlib function to include stale data from previous memory allocations in the...