25090 matches found
CVE-2026-44263
Weblate is a web based localization tool. Prior to version 5.17.1, the screenshots, tasks, and component link API allowed for the enumeration of translations in a project inaccessible to the user. This issue has been patched in version 5.17.1...
CVE-2026-44264
Weblate is a web based localization tool. Prior to version 5.17.1, the Markdown renderer used in user comments and other user-provided content didn't properly sanitize some attributes. This issue has been patched in version 5.17.1...
CVE-2026-8423
The JaviBola Custom Theme Test plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5. This is due to missing or incorrect nonce validation on the options page. This makes it possible for unauthenticated attackers to change the site's active...
CVE-2026-8852
IBM HTTP Server 8.5, and 9.0 is vulnerable to denial of service via the optional module modfastcgi module...
CVE-2026-25606
A SQL injection vulnerability has been identified in STER. Improper neutralization of input provided by user into multiple Search Filters allows for SQL Injection attacks. It allows an authenticated attacker to view sensitive data such as data belonging to other users, or any other data that the...
CVE-2026-34279
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Event Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-34184
Hydrosystem Control System does not enforce authorization for some directories. This allows an unauthorized attacker to read all files in these directories and even execute some of them. Critically the attacker could run PHP scripts directly on the connected database.This issue was fixed in...
CVE-2026-34393
Weblate is a web based localization tool. In versions prior to 5.17, the user patching API endpoint didn't properly limit the scope of edits. This issue has been fixed in version 5.17...
CVE-2026-41583
ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.1 and prior to zebra-script version 5.0.2, after a refactoring, Zebra failed to validate a consensus rule that restricted the possible values of sighash hash types for V5 transactions which were enabled in the NU5 network...
CVE-2026-41901
A flaw was found in Thymeleaf, a server-side Java template engine. A security bypass vulnerability exists in its expression execution mechanisms, allowing specific constructs to be executed even in restricted sandboxed contexts. If an application developer passes unsanitized variables containing...
CVE-2026-41951
Path traversal vulnerability exists in GROWI v7.5.0 and earlier, which may allow an attacker to execute arbitrary EJS templates on the server when an email server is running in GROWI...
CVE-2026-41670
Admidio is an open-source user management solution. Prior to version 5.0.9, the SAML IdP implementation in Admidio's SSO module uses the AssertionConsumerServiceURL value directly from incoming SAML AuthnRequest messages as the destination for the SAML response, without validating it against the...
GHSA-P45X-6RJM-X9QF vulnerabilities
Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-25-openj9...
GHSA-PFR6-J3GF-9M85 vulnerabilities
Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-25-openj9...
GHSA-RP3Q-RW9W-295J vulnerabilities
Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-25-openj9...
GHSA-VWJG-VPWQ-RXVV vulnerabilities
Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-25-openj9...
GHSA-XXCM-X786-Q6GG vulnerabilities
Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-25-openj9...
GHSA-P9XP-4JV8-8R8F vulnerabilities
Vulnerabilities for packages: openjdk-8-openj9, openjdk-21-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-25-openj9...