kkFileView 4.0 - Server-Side Request Forgery

kkFileView 4.0 contains a server-side request forgery caused by improper validation in OnlinePreviewController.java, letting attackers induce the server to make arbitrary requests, exploit requires sending crafted requests. id: CVE-2022-42149 info: name: kkFileView 4.0 - Server-Side Request Forge...

OpenCATS - Open Redirect

OpenCATS contains an open redirect vulnerability due to improper validation of user-supplied GET parameters. This, in turn, exposes OpenCATS to possible template injection and obtaining sensitive information, modifying data, and/or executing unauthorized operations. id: CVE-2023-27292 info: name:...

Gradio - Open Redirect

An open redirect vulnerability exists in the gradio-app/gradio, affecting the latest version. The vulnerability allows an attacker to redirect users to arbitrary websites, which can be exploited for phishing attacks, Cross-site Scripting XSS, Server-Side Request Forgery SSRF, amongst others. This...

EUVD-2026-78158

IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers...

CVE-2026-12758

IBM Cloud Pak for Business Automation is vulnerable to an authorization bypass caused by improper validation of HTTP headers. A remote attacker with low privileges can exploit this to invoke restricted endpoints, resulting in low confidentiality and low integrity impact (CVSS 3.1 score 5.4, MEDIU...

CVE-2026-14275

CVE-2026-14275 affects IBM i Access Client Solutions (ACS) , versions 1.1.2.0 through 1.1.9.15. An authenticated user can execute arbitrary commands with normal user privileges by exploiting improper validation of user-supplied input in a STRPCCMD CL command (CWE-78, OS Command Injection). The vu...

EUVD-2026-78148

IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file...

CVE-2026-65342

CVE-2026-65342 is a permissions issue in macOS that was addressed with improved validation . The vulnerability could allow an app to access sensitive user data . The issue is fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 . No specific exploitation details or in-the-wil...

CVE-2025-25279

Security Advisory MMSA-2025-00430 / CVE-2025-25279 Summary After uploading a file to Mattermost Boards, when the fileId parameter is modified and the board is copied, the file now points to and downloads the target file specified in the parameter. Affected Versions: Mattermost instances with Boar...

EUVD-2026-78054

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths...

EUVD-2026-77797

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths...

CVE-2026-16338

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by an arbitrary file write vulnerability (CVE-2026-16338) caused by improper validation of file paths (CWE-73: External Control of File Name or Path). A remote authenticated attacker can exploit this to write files to arbitrary locations, wi...

EUVD-2026-77787

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation...

CVE-2026-17047 IBM Db2 Mirror for i is vulnerable to Cross-Site Request Forgery []

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation...

CVE-2026-18251

IBM i (versions 7.3, 7.4, 7.5, and 7.6 ) is affected by a vulnerability in Navigator for i where improper validation of the WebSocket origin allows a remote, unauthenticated attacker to obtain sensitive information. The underlying cause is classified as CWE-1385: Missing Origin Validation in WebS...

EUVD-2026-77779

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper validation of the WebSocket origin...

CVE-2026-18251 IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper validation of the WebSocket origin...

CVE-2026-76442

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

EUVD-2026-77626

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple...

CVE-2026-51954

Producto: Webasyst Framework Versión afectada: ≤ 4.0.3 Gravedad: Alta CVSS 3.1: 8.0 Descripción Webasyst Framework hasta la versión 4.0.3 contiene una falla en la implementación de OAuth 2.0 que permite a un atacante remoto no autenticado interceptar las credenciales de autorización emitidas...