312592 matches found
CVE-2026-33333
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is sensitive information disclosure in the error messages. This issue has been fixed in version 3.2.3...
CVE-2026-31936
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, users can access to unauthorized object information through the search operation. This issue has been fixed in version 3.2.3...
EUVD-2026-64182
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is sensitive information disclosure in the error messages. This issue has been fixed in version 3.2.3...
CVE-2026-33333
Combodo iTop , a web-based IT service management tool, is affected by a sensitive information disclosure vulnerability in the ajax.render.php component prior to version 3.2.3 . Error messages expose sensitive information to authenticated users. The CVSS 3.1 score is 3.5 (LOW) , reflecting low con...
CVE-2026-33333 Combodo iTop: Information disclosure in ajax.render.php
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is sensitive information disclosure in the error messages. This issue has been fixed in version 3.2.3...
CVE-2026-33333 Combodo iTop: Information disclosure in ajax.render.php
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, there is sensitive information disclosure in the error messages. This issue has been fixed in version 3.2.3...
[SECURITY] [DSA 6457-1] openjdk-21 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6457-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 21, 2026 https://www.debian.org/security/faq -...
CVE-2026-53497 CrossWatch: Unauthenticated /api/app-auth/status endpoint leaks active session metadata (IP, User-Agent, session IDs)
CrossWatch CW is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without authentication and returns the othersessions array, which exposes metadata of all active sessions — including originating IP addresses, User-Agent strings, internal session IDs, and...
CVE-2026-53497
CrossWatch (a synchronization engine) prior to version 0.9.21 exposes an unauthenticated information disclosure via the GET /api/app-auth/status endpoint. The endpoint returns the other_sessions array without requiring credentials, leaking metadata for all active sessions including originating IP...
CVE-2026-53497 CrossWatch: Unauthenticated /api/app-auth/status endpoint leaks active session metadata (IP, User-Agent, session IDs)
CrossWatch CW is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without authentication and returns the othersessions array, which exposes metadata of all active sessions — including originating IP addresses, User-Agent strings, internal session IDs, and...
EUVD-2026-64172
CrossWatch CW is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without authentication and returns the othersessions array, which exposes metadata of all active sessions — including originating IP addresses, User-Agent strings, internal session IDs, and...
EUVD-2026-64170
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, users can access to unauthorized object information through the search operation. This issue has been fixed in version 3.2.3...
CVE-2026-31936 Combodo iTop: Unauthorized access to object information via search operation
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, users can access to unauthorized object information through the search operation. This issue has been fixed in version 3.2.3...
CVE-2026-31936
Combodo iTop , a web-based IT service management tool, is affected by an unauthorized access vulnerability in its search operation prior to version 3.2.3 . Authenticated users can access object information they should not have permission to view, resulting in high impact on confidentiality, integ...
CVE-2026-31936 Combodo iTop: Unauthorized access to object information via search operation
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, users can access to unauthorized object information through the search operation. This issue has been fixed in version 3.2.3...
DEBIAN-CVE-2026-77219
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...
CVE-2026-69224
There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...
CVE-2026-69225
There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...
