8933 matches found
EUVD-2026-98090
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files...
CVE-2026-75076 IBM Aspera Enterprise Webapps Information Disclosure
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files...
USN-8913-1 libx11 vulnerabilities
Adam Bedard discovered that libx11 incorrectly handled certain XKB keyboard map replies. If a user were tricked into connecting to a malicious X server, a remote attacker could possibly use this issue to cause libx11 to crash, resulting in a denial of service, or possibly execute arbitrary code...
USN-8913-1: libx11 vulnerabilities
Adam Bedard discovered that libx11 incorrectly handled certain XKB keyboard map replies. If a user were tricked into connecting to a malicious X server, a remote attacker could possibly use this issue to cause libx11 to crash, resulting in a denial of service, or possibly execute arbitrary code...
CVE-2026-107437
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime...
CVE-2026-107437 Plaintext Database Password Exposure in GV-E-Map Server V18.2.0A
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime...
CVE-2026-107437
The GV-E-Map Server V18.2.0A contains a plaintext database password hard-coded within an application component. An attacker can recover these credentials by performing static analysis on the distributed binary or by accessing the process memory during runtime. This vulnerability leads to a high c...
EUVD-2026-97163
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime...
CVE-2026-107437: Use of Hard-coded Credentials
GV-E-Map Server V18.2.0A contains a plaintext database password embedded within an application component. The credential can be recovered through static analysis of the distributed binary and may also be exposed in process memory during runtime...
CVE-2026-75076: Exposure of Sensitive Information to an Unauthorized Actor
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to the exposure of JavaScript source map files...
PT-2026-110432
Name of the Vulnerable Software and Affected Versions GV-E-Map Server version 18.2.0A Description An application component contains a plaintext database password. This credential can be recovered by performing static analysis on the distributed binary or may be exposed in process memory during...
telegram-nearby-map
Telegram Nearby Map Telegram Nearby Map utiliza OpenStreetMap y la biblioteca oficial de Telegram para encontrar la posición de los usuarios cercanos. Ten en cuenta: La API de Telegram se actualizó hace un tiempo para hacer menos precisas las distancias de los usuarios cercanos, impidiendo el...
SUSE CVE-2026-78659
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...
CLEANSTART-2026-XM40960 source-map-js through 1
Security vulnerability affects the n8n package. source-map-js through 1...
PT-2026-117912
Security vulnerability affects the n8n package. source-map-js through 1...
EUVD-2026-95327
IBM Guardium Data Protection 12.2.2 could allow a remote attacker to cause a denial of service due to a race condition resulting from concurrent unsynchronized writes to a shared map...
CVE-2026-78659
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...
AZL-107282 CVE-2026-78659 affecting package cri-tools 1.32.0-8
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...
AZL-107694 CVE-2026-78659 affecting package libcontainers-common 20240213-3
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...
CVE-2026-78659
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...