52230 matches found
CVE-2026-34279
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager component: Event Management. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...
CVE-2026-47696
WWBN AVideo is an open source video platform. In 29.0 and earlier, plugin/AuthorizeNet/processPayment.json.php credits the logged-in user's wallet based only on the attacker-controlled amount POST parameter. The endpoint contains a TODO for real Authorize.Net charging, hardcodes $paymentSuccess =...
CVE-2026-41057
WWBN AVideo is an open source video platform. In versions 29.0 and below, the CORS origin validation fix in commit 986e64aad is incomplete. Two separate code paths still reflect arbitrary Origin headers with credentials allowed for all /api/ endpoints: 1 plugin/API/router.php lines 4-8...
CVE-2026-41064
WWBN AVideo is an open source video platform. In versions up to and including 29.0, an incomplete fix for AVideo's test.php adds escapeshellarg for wget but leaves the filegetcontents and curl code paths unsanitized, and the URL validation regex /^http/ accepts strings like httpevil.com. Commit...
CVE-2026-41304
WWBN AVideo is an open source video platform. In versions 29.0 and below, the cloneServer.json.php endpoint in the CloneSite plugin constructs shell commands using user-controlled input url parameter without proper sanitization. The input is directly concatenated into a wget command executed via...
CVE-2026-41423
Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to versions 19.2.21, 20.3.19, 21.2.9, and 22.0.0-next.8, a Server-Side Request Forgery SSRF vulnerability exists in @angular/platform-server due to improper...
CVE-2026-23708
A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, FortiSOAR on-premise 7.5.0 through 7.5.2 may allow an unauthenticated attacker to bypass authentication via replaying captured 2FA...
CVE-2026-32658
Dell Automation Platform versions prior to 2.0.0.0, contains a missing authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-10868
A mass assignment vulnerability exists in the MISP user edit functionality due to insufficient filtering of user-supplied fields in UsersController::edit. When processing edit requests, the application accepted a user-controlled User.id value from request data. An authenticated attacker could cra...
CVE-2026-45578
WWBN AVideo is an open source video platform. In 29.0 and earlier, there is a classic shell-metacharacter injection. The YPTSocket notification branch in plugin/Live/onpublish.php builds an execAsync command line by string concatenation, single-quoting each argument but never calling...
CVE-2026-45628
Dokploy is a free, self-hostable Platform as a Service PaaS. In 0.29.2 and earlier, Dokploy constructs shell commands using JavaScript template literals and executes them via childprocess.exec which runs through /bin/sh -c. User-supplied branch names, repository URLs, and Docker credentials are...
GHSA-XVMR-9P7M-JMWV vulnerabilities
Vulnerabilities for packages: openjdk-17-openj9, openjdk-26-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9, openjdk...
CVE-2008-3109 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9...
GHSA-32MG-GG62-GFQ3 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9...
GHSA-32VR-5HXF-X93F vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9...
GHSA-99RJ-3595-5FRJ vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9...
GHSA-9C63-94GF-85H2 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9...
GHSA-F5XR-W782-5RG9 vulnerabilities
Vulnerabilities for packages: openjdk-26-openj9, openjdk-17-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-25-openj9...