47241 matches found
CVE-2026-44236
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.framemax value during amqplogin, and rabbitmq-c accepts the value in amqplogininner in librabbitmq/amqpsocket.c. amqptuneconnection in...
PT-2026-48753
Trying to download the hotfix for 81.20 hotfix T141 via https://support.checkpoint.com/results/download/143620 for some sick reason this is behind an account login that i do not have access to. wondering if anyone here could provide it, pretty innocuous ask i think...
CVE-2022-48575
A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4...
CVE-2022-48575
A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4...
CVE-2022-48575
A person with access to a Mac may be able to bypass Login Window. A consistency issue was addressed with improved state handling. This issue is fixed in macOS Monterey 12.4...
nebula-mesh: Session and OIDC state cookies lack the Secure attribute
internal/web/session.go and internal/web/oidc.go set HttpOnly and SameSite=Lax on every cookie but never Secure. A single plaintext request to the origin operator on a LAN, mistyped URL, HTTP→HTTPS not strictly enforced, reverse proxy misconfiguration discloses the session. Affected All released...
CVE-2026-45566
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the login flow allow-lists next URLs by rejecting strings containing https:// or http:// substrings, then constructs https://request.hostnexturl and the JS client redirects via...
CVE-2026-45566 Roxy-WI: Open redirect on /login?next= via basic-auth userinfo syntax bypass
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the login flow allow-lists next URLs by rejecting strings containing https:// or http:// substrings, then constructs https://request.hostnexturl and the JS client redirects via...
CVE-2026-45566
Roxy-WI unauthenticated login flow flaw (affecting 8.2.6.4 and prior) allows an open redirect via the next parameter. The code rejects strings containing https:// or http:// but then builds https://{request.host}{next_url} and redirects with window.location.replace(), not accounting for userinfo@...
CVE-2026-45566
Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. In versions 8.2.6.4 and prior, the login flow allow-lists next URLs by rejecting strings containing https:// or http:// substrings, then constructs https://request.hostnexturl and the JS client redirects via...
hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.513)
org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...
hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.513)
org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...
Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL
Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments ./ or ../, allowing attackers to perform phishing attacks...
GHSA-92M7-4FPW-2WXM Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container"
Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate to servlet container" security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain...
Jenkins: Open Redirect phishing attacks possible via "from" parameter in "Delegate to servlet container"
Jenkins 2.567 and earlier, LTS 2.555.2 and earlier does not ensure that the "from" parameter in the "Delegate to servlet container" security realm is safe to redirect to after login, allowing attackers to perform phishing attacks by redirecting users to an attacker-controlled domain...
hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.513)
org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...
hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.513)
org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...
hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.513)
org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...
GHSA-3RQH-HCH3-JHPC Jenkins Open Redirect via Relative Path Segments in Post-Login Redirect URL
Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments ./ or ../, allowing attackers to perform phishing attacks...
hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.513)
org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...