816 matches found
CVE-2026-111398
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: from n/a through 8.16.1...
EUVD-2026-104136
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: from n/a through 8.16.1...
CVE-2026-111398: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Path Traversal.This issue affects MapSVG: from n/a through 8.16.1...
CVE-2026-111397
Missing Authorization vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Retrieve Embedded Sensitive Data.This issue affects MapSVG: from n/a through 8.16.1...
CVE-2026-111399
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1...
CVE-2026-111405
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows Stored XSS.This issue affects MapSVG: from n/a through 8.16.1...
PT-2026-115597
Name of the Vulnerable Software and Affected Versions MapSVG versions prior to 8.16.2 Description An improper neutralization of input during web page generation allows for Stored Cross-site Scripting XSS, a flaw where malicious scripts are permanently stored on the target server and later execute...
CVE-2026-111399: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in PT Norther Lights Production MapSVG mapsvg-lite-interactive-vector-maps allows SQL Injection.This issue affects MapSVG: from n/a through 8.16.1...
PT-2026-115594
Name of the Vulnerable Software and Affected Versions MapSVG versions prior to 8.16.2 Description A missing authorization issue in the mapsvg-lite-interactive-vector-maps component allows the retrieval of embedded sensitive data. Recommendations Update to a version newer than 8.16.1...
CVE-2026-79820
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...
CVE-2026-79820
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...
EUVD-2026-92433
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...
CVE-2026-79820
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...
CVE-2026-79820
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware . This flaw allows for a potential CRITICAL impact on confidentiality, integrity, and availability. While the CVSS score indicates a high attack complexity and a changed scope, specific technical d...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: greybus: lights: check return of getchannelfrommode If the channel for the given node is not found, we return null from getchannelfrommode. Make sure we validate the return pointer before using it in two of the missing places. Th...
PT-2026-106002
Name of the Vulnerable Software and Affected Versions HPE Integrated Lights-Out iLO 7 version 1.25.00 Description A remote user validation failure exists in the firmware. This issue could allow an unauthorized user to gain access to the iLO, which provides capabilities to power a server and open ...
HPESBHF05163 rev.1 - HPE Integrated Lights-Out (iLO) 7 Using COM, User Validation Failure Vulnerability
Potential Security Impact: Remote: User Validation Failure SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Integrated Lights-Out 7 iLO 7 1.25.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2026-79820 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H ...
CVE-2026-79820: Improper Authentication
A remote user validation failure vulnerability exists in HPE Integrated Lights-Out iLO 7 firmware...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Staging: greybus: lights: Avoid dereferencing NULL values. The gblightslightconfig function stores the channelcount before allocating the channels array. If kalloc fails, gblightsrelease iterates over the non-zero count and...