13016 matches found
DEBIAN-CVE-2026-93852
In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...
CVE-2026-93852
In OpenStack Blazar before 17.0.1, the V2 lease listing operation GET /v2/leases returns leases for every project without enforcing project scoping or an administrator-only policy. Any authenticated user with access to the Blazar REST API can enumerate leases belonging to other tenants, exposing...
CVE-2026-11726
IBM MQ across multiple platforms (queue manager, HPE NonStop , and MQ Appliance ) is affected by improper validation of message header offset values (CWE-125: Out-of-bounds Read), allowing a remote authenticated attacker to read heap memory or cause a denial of service via crafted messages. The r...
CVE-2026-11540 IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet...
CVE-2026-11540
IBM WebSphere Application Server versions 9.0 and 8.5 (prior to 9.0.5.29 and 8.5.5.31 ) contain an information disclosure vulnerability in the FileTransfer servlet , allowing a remote attacker with no privileges or user interaction to obtain sensitive information about the file system. The CVSS 3...
CVE-2026-93753
creationtimestamp| type| source ---|---|--- 2026-09-18 19:03:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7fbnbb2gmpxdb 2026-09-18 20:01:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxjbtb2e22 2026-09-22 10:10:33+00:00| seen|...
CVE-2026-29607
creationtimestamp| type| source ---|---|--- 2026-09-18 18:48:40+00:00| seen| https://gist.github.com/jtomaszon/053ae1d85f689952717574dd2ae0da96 2026-09-18 19:11:19+00:00| seen| https://gist.github.com/jtomaszon/dee3171f25478f317848bf753f8e48a7...
CVE-2026-82020
creationtimestamp| type| source ---|---|--- 2026-09-18 18:48:40+00:00| seen| https://gist.github.com/jtomaszon/053ae1d85f689952717574dd2ae0da96 2026-09-18 19:11:19+00:00| seen| https://gist.github.com/jtomaszon/dee3171f25478f317848bf753f8e48a7...
CVE-2026-9354
creationtimestamp| type| source ---|---|--- 2026-09-18 18:48:40+00:00| seen| https://gist.github.com/jtomaszon/053ae1d85f689952717574dd2ae0da96 2026-09-18 19:11:19+00:00| seen| https://gist.github.com/jtomaszon/dee3171f25478f317848bf753f8e48a7...
CVE-2026-90413
creationtimestamp| type| source ---|---|--- 2026-09-18 18:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvssxcqil52j...
DEBIAN-CVE-2026-93748
http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to...
DEBIAN-CVE-2026-93750
http-cache-semantics through 4.2.0 contains a cache validation vulnerability in the varyMatches function that fails to properly validate Vary header wildcards due to byte-for-byte string comparison. Attackers can request URLs previously fetched by other clients to receive cached responses intende...
CVE-2026-93748
http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to...
DEBIAN-CVE-2026-92768
A flaw was found in cockpit-machines. This vulnerability allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords, by inspecting process command-line arguments during VM creation or installation. The cockpit-machines component passes password value...
CVE-2026-93748
http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to...
CVE-2026-93750
http-cache-semantics through 4.2.0 contains a cache validation vulnerability in the varyMatches function that fails to properly validate Vary header wildcards due to byte-for-byte string comparison. Attackers can request URLs previously fetched by other clients to receive cached responses intende...
CVE-2026-93760
creationtimestamp| type| source ---|---|--- 2026-09-18 18:17:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/az2jn65gliwr6 2026-09-18 20:02:37+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxkugfof2z 2026-09-25 05:07:08+00:00| seen|...
CVE-2026-81178
SysReptor is a fully customizable pentest reporting platform. Prior to 2026.55, an unauthenticated holder of a public note share link receives project-wide collaborative editing metadata because the public share consumer joins the same collaboration group as authenticated project members and...
CVE-2026-93761
creationtimestamp| type| source ---|---|--- 2026-09-18 18:15:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/alghf3pafebby 2026-09-18 20:02:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvsxl3vg7l2k 2026-09-25 04:37:07+00:00| seen|...