313033 matches found
EUVD-2026-62920
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could retrieve the information contained in Edge Processor pipeline configurations through a Representational State Transfer REST API endpoint when Edge Processor is turned on. The vulnerability does not affect versions prio...
EUVD-2026-62902
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated user could read JavaScript files outside the Splunk Web static directory. The vulnerability is possible because Splunk Web does not restrict static file requests to the configured static directory...
EUVD-2026-63114
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including service details that expose relevant runtime and build metadata for the sidecar. The vulnerability does not affect Splunk Enterpri...
EUVD-2026-63100
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...
CVE-2026-76310
creationtimestamp| type| source ---|---|--- 2026-08-20 00:09:37+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mthxexuyib2c 2026-08-20 03:29:52+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mtickz5u6r2y 2026-08-20 04:45:36+00:00| seen|...
postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
A flaw was found in PostgreSQL pgcrypto. When using disabled ciphers, a user can recover cleartext data by observing faulty ciphertext. This issue arises because the application may accept encrypted data as input, leading to successful decryption even with an incorrect key. Consequently, the...
PT-2026-79239
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An out-of-bounds read allows a remote attacker to obtain sensitive information and cause a denial of service. An out-of-bounds read occurs when a program reads data past the...
EUVD-2026-63708
An issue in code100xDevs 100xdevs CMS v.1.0 2026-04-30 allows a remote attacker to obtain sensitive information via the src/middleware.ts, and src/app/api/mobile/search/route.ts components...
PT-2026-79050
NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version 1.0.88.0 until stable version 6.0.1698.0 and preview version 6.5.1742.0, the Lz4Decode function in NanaZip.Core/SevenZip/CPP/7zip/Archive/SquashfsHandler.cpp rejects only a zero return from LZ4 decompress saf...
PT-2026-79243
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description An integer underflow allows a remote attacker to cause a denial of service and potentially disclose sensitive information. An integer underflow occurs when an arithmetic...
PT-2026-79217
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
CVE-2026-52021
An issue in code100xDevs 100xdevs CMS v.1.0 2026-04-30 allows a remote attacker to obtain sensitive information via the src/middleware.ts, and src/app/api/mobile/search/route.ts components...
PT-2026-79213
Name of the Vulnerable Software and Affected Versions Microsoft Partner Center affected versions not specified Description An authorization bypass exists due to a user-controlled key, which allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, ther...
The vulnerability of the shmem module in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the shmem module in the Linux operating system’s kernel is related to the exposure of information. Exploiting this vulnerability can allow an attacker to cause a service failure...
Debian dla-4749 : chromium - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4749 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4749-1 [email protected]...
RHEL 9 : osbuild-composer (RHSA-2026:57541)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:57541 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...
Debian dsa-6455 : chromium - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6455 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6455-1 [email protected] https://www.debian.org/securit...
PT-2026-79210
Name of the Vulnerable Software and Affected Versions Azure Stack HCI affected versions not specified Description An observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no information...
PT-2026-79058
OpenProject is open-source, web-based project management software. In version 17.5.1 and earlier, an authenticated non-admin project member can request the inplace-edit dialog for a raw custom field project attribute. The dialog path resolves the project custom field by its raw identifier without...