Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the REST and WebSocket endpoints due to lack of authentication enforcement. An attacker can gain unauthorized access and interact with sensitive server functionality by sending requests...

Parse Server has Denial of Service (DoS) and Cloud Function Dispatch Bypass via Prototype Chain Resolution

Impact An unauthenticated attacker can crash the Parse Server process by calling a Cloud Function endpoint with a prototype property name as the function name. The server recurses infinitely, causing a call stack size error that terminates the process. Other prototype property names bypass Cloud...

GHSA-5J86-7R7M-P8H6 Parse Server has Denial of Service (DoS) and Cloud Function Dispatch Bypass via Prototype Chain Resolution

Impact An unauthenticated attacker can crash the Parse Server process by calling a Cloud Function endpoint with a prototype property name as the function name. The server recurses infinitely, causing a call stack size error that terminates the process. Other prototype property names bypass Cloud...

EUVD-2026-10549

Parse Server has Denial of Service DoS and Cloud Function Dispatch Bypass via Prototype Chain Resolution...

CVE-2026-27689 Denial of service (DOS) in SAP Supply Chain Management

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

CVE-2026-27689

CVE-2026-27689 affects SAP Supply Chain Management. An authenticated regular user with network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter, causing prolonged loop execution and resource exhaustion that leads to a DoS (availability...

CVE-2026-27689

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

CVE-2026-27689 Denial of service (DOS) in SAP Supply Chain Management

Due to an uncontrolled resource consumption Denial of Service vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly invoke a remote-enabled function module with an excessively large loop-control parameter. This triggers prolonged loop execution th...

CVE-2026-27688 Missing Authorization check in SAP NetWeaver Application Server for ABAP

Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log Files via a specific RFC function module. The attacker with the necessary privileges to execute this function module could potentially...

CVE-2026-27688

Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log Files via a specific RFC function module. The attacker with the necessary privileges to execute this function module could potentially...

CVE-2026-27688

CVE-2026-27688 affects SAP NetWeaver Application Server for ABAP. A missing authorization check allows an authenticated user with privileges to execute a specific RFC function module to read Database Analyzer Log Files, potentially escalating privileges and exposing confidential data. Impact is l...

CVE-2026-27686

Due to a Missing Authorization Check in SAP Business Warehouse Service API, an authenticated attacker could perform unauthorized actions via an affected RFC function module. Successful exploitation could enable unauthorized configuration and control changes, potentially disrupting request...

CVE-2026-24310 Missing Authorization check in SAP NetWeaver Application Server for ABAP

Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module and read the sensitive information from database catalog of the ABAP system. This vulnerability has low impact on the application's confidentialit...

CVE-2026-24309

Due to missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker could execute specific ABAP function module to read, modify or insert entries into the database configuration table of the ABAP system. This unauthorized content change could lead to reduced...

The vulnerabilities of the functions hisi_acc_vfiopci_open_device() and hisi_acc_vfiopci_close_device() in the drivers/vfio/pci/hisilicon/hisi_acc_vfiopci.c driver for VFIO device controllers in the Linux operating system allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions hisiaccvfiopciopendevice and hisiaccvfiopciclosedevice in the drivers/vfio/pci/hisilicon/hisiaccvfiopci.c driver for VFIO devices in the Linux operating system is related to improper initialization. Exploiting this vulnerability could allow an attacker to...

PT-2026-24305

Уязвимость драйвера Windows Ancillary Function Driver for WinSock операционных систем Windows связана с использованием памяти после её освобождения. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

PT-2026-24208

Name of the Vulnerable Software and Affected Versions TUBITAK BILGEM Software Technologies Research Institute Liderahenk versions prior to 3.4.0 Description A missing authentication check for a critical function in Liderahenk allows for remote code inclusion, privilege abuse, and command injectio...

PT-2026-24164

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for ABAP affected versions not specified Description An authenticated attacker with user privileges may be able to read Database Analyzer Log Files due to a missing authorization check within a specific RFC...

PT-2026-24165

Name of the Vulnerable Software and Affected Versions SAP Supply Chain Management affected versions not specified Description An authenticated attacker with regular user privileges and network access can cause a denial-of-service condition by repeatedly invoking a remote-enabled function module...

The vulnerability of the anx7625_i2c_probe() function in the drivers/gpu/drm/bridge/analogix/anx7625.c driver for the Direct Rendering Infrastructure (DRI) component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the anx7625i2cprobe function in the drivers/gpu/drm/bridge/analogix/anx7625.c driver for the Direct Rendering Infrastructure DRI component of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a service...