36462 matches found
CVE-2026-34927
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...
CVE-2026-34896
Cross-Site Request Forgery CSRF vulnerability in Analytify Under Construction, Coming Soon & Maintenance Mode allows Cross Site Request Forgery.This issue affects Under Construction, Coming Soon & Maintenance Mode: from n/a through 2.1.1...
CVE-2026-34928
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism. Please note: an attacker must first obtain the ability to...
CVE-2026-3461
The Visa Acceptance Solutions plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.1.0. This is due to the expresspayproductpagepayfororder function logging users in based solely on a user-supplied billing email address during guest checkout for...
CVE-2026-41901
A flaw was found in Thymeleaf, a server-side Java template engine. A security bypass vulnerability exists in its expression execution mechanisms, allowing specific constructs to be executed even in restricted sandboxed contexts. If an application developer passes unsanitized variables containing...
CVE-2026-41649
Outline is a service that allows for collaborative documentation. The shares.create API endpoint starting in version 0.86.0 and prior to version 1.7.0 has an insecure direct object reference.. When both collectionId and documentId are provided in the request, the authorization logic only checks...
CVE-2026-32135
NanoMQ MQTT Broker NanoMQ is an all-around Edge Messaging Platform. Versions prior to 0.24.11 have a remotely triggerable heap buffer overflow in the uriparamparse function of NanoMQ's REST API. The vulnerability occurs due to an off-by-one error when allocating memory for query parameter keys an...
CVE-2026-10611
An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement. In deployments configured with LdapAuth.mixedAuth=true and Security.requireotp=true, users authenticated through an authentication plugin, such as LDAP, may have their authenticat...
CVE-2026-10056
CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Windows allows an unauthenticated remote attacker to steal the session token of an authenticated user and perform Administrator Account...
CVE-2026-45206
An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45207 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the abilit...
CVE-2026-45208
A time-of-check time-of-use vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...
GHSA-RP3Q-RW9W-295J vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-26-openj9...
GHSA-PXHF-QG7H-8X8M vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-26-openj9...
GHSA-X7PQ-J293-X4P5 vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-26-openj9...
GHSA-XXCM-X786-Q6GG vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-26-openj9...
GHSA-WX45-VX6H-76CQ vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-26-openj9...
GHSA-VWJG-VPWQ-RXVV vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-26-openj9...
GHSA-RXF7-P2JR-3VF7 vulnerabilities
Vulnerabilities for packages: openjdk-25-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-26-openj9...