317309 matches found
CVE-2026-53497 CrossWatch: Unauthenticated /api/app-auth/status endpoint leaks active session metadata (IP, User-Agent, session IDs)
CrossWatch CW is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without authentication and returns the othersessions array, which exposes metadata of all active sessions — including originating IP addresses, User-Agent strings, internal session IDs, and...
EUVD-2026-64172
CrossWatch CW is a synchronization engine. Prior to version 0.9.21, GET /api/app-auth/status is accessible without authentication and returns the othersessions array, which exposes metadata of all active sessions — including originating IP addresses, User-Agent strings, internal session IDs, and...
EUVD-2026-64170
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, users can access to unauthorized object information through the search operation. This issue has been fixed in version 3.2.3...
CVE-2026-31936 Combodo iTop: Unauthorized access to object information via search operation
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, users can access to unauthorized object information through the search operation. This issue has been fixed in version 3.2.3...
CVE-2026-31936
Combodo iTop , a web-based IT service management tool, is affected by an unauthorized access vulnerability in its search operation prior to version 3.2.3 . Authenticated users can access object information they should not have permission to view, resulting in high impact on confidentiality, integ...
CVE-2026-31936 Combodo iTop: Unauthorized access to object information via search operation
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, users can access to unauthorized object information through the search operation. This issue has been fixed in version 3.2.3...
DEBIAN-CVE-2026-77219
GNU Emacs before 31.0.91 contains an integer overflow in the PBM/PPM/PGM image loader that allows an attacker to leak heap memory contents by supplying a crafted image with large dimensions and an elevated max color index. The image loader multiplies image dimensions and channel count using signe...
CVE-2026-69225
There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...
CVE-2026-69224
There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...
CVE-2026-27462
creationtimestamp| type| source ---|---|--- 2026-08-21 21:01:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmnsnbhom27...
CVE-2026-30866
creationtimestamp| type| source ---|---|--- 2026-08-21 21:00:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtmnre44qn2b...
CVE-2026-76876
creationtimestamp| type| source ---|---|--- 2026-08-21 20:53:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5aeqjsluxha5l...
MINI-J3XF-JG47-3F24
Bulletin has no description...
CVE-2026-69225
Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier are affected by an information disclosure vulnerability that allows a remote, unauthenticated attacker to reflect sensitive information in an HTTP response body. The NVD scores this CVSS 7.5 (HIGH) with high confidentiality impact, whi...
CVE-2026-69225 information disclosure vulnerability in Esri Portal for ArcGIS
There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...
EUVD-2026-64154
There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 11.5 through 12.0 and earlier that may allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...
EUVD-2026-64152
There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...
CVE-2026-69224
Esri Portal for ArcGIS versions 12.0 and earlier are affected by an information disclosure vulnerability that may allow a remote, unauthenticated attacker to reflect sensitive information in an HTTP response body under difficult-to-reproduce circumstances. The primary impact is confidentiality (h...
CVE-2026-69224 information disclosure vulnerability in Esri Portal for ArcGIS
There is an information disclosure vulnerability in Esri Portal for ArcGIS versions 12.0 and earlier that may under difficult to reproduce circumstances allow a remote, unauthenticated attacker to reflect sensitive information in a http response body...