981411 matches found
CVE-2026-81379
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-81379
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-86074 n8n: Instance AI Credential Setup Accepts Unvalidated Probe URL from Fetched Content
n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the Instance AI credential setup flow accepted a credential test or verification URL without checking that it matched the workflow node's origin. Attacker-controlled fetched content could influence that URL after a us...
CVE-2026-84389
A url redirection to untrusted site 'open redirect' vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via...
EUVD-2026-73335
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-81379
Visual Studio Code is vulnerable to a security feature bypass caused by not failing securely ("failing open"), allowing an unauthorized network attacker to bypass a security control with low complexity and no privileges, though user interaction is required . The CVSS 3.1 score is 8.2 (HIGH) with ...
CVE-2026-84389
A url redirection to untrusted site 'open redirect' vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via...
EUVD-2026-72923
A url redirection to untrusted site 'open redirect' vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via...
CVE-2026-84389
Fortinet FortiSIEM versions 7.5.0 through 7.5.1 and 7.4.1 through 7.4.2 are affected by an open redirect vulnerability that may allow an attacker to execute unauthorized code or commands. The CVSS v3.1 base score is 3.1 (LOW) , with a network attack vector, high complexity, no privileges required...
CVE-2026-84389
A url redirection to untrusted site 'open redirect' vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via...
Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring
Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 3.5.19 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...
Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring
Summary Multiple vulnerabilities were addressed in IBM Library Support for Spring 2.7.43 Vulnerability Details CVEID:CVE-2026-47884 DESCRIPTION: Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/" mapping that results in view rendering, and...
Visual Studio Code Security Feature Bypass Vulnerability
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
Shuffle v2.3.0-rc1
Shuffle Automation Deploy On Shuffle is an open source automation platform, built for and by the security professionals. Security operations is complex, but it doesn't have to be. Built to work well with MSSP's and other service providers in mind. Get training Key Features — Community & Support —...
CVE-2026-84818
Unauthenticated Cross Site Scripting XSS in Open User Map = 1.4.50 versions...
CVE-2026-84818
CVE-2026-84818 is an unauthenticated Cross Site Scripting (XSS) vulnerability affecting the WordPress Open User Map plugin in versions 1.4.50 and below . The vulnerability is rated HIGH with a CVSS 3.1 score of 7.1 (vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L), assigned by Patchstack . The attack...
CVE-2026-84818 WordPress Open User Map plugin <= 1.4.50 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Open User Map = 1.4.50 versions...
EUVD-2026-72647
Unauthenticated Cross Site Scripting XSS in Open User Map = 1.4.50 versions...
