44136 matches found
PT-2026-65434
SAP NetWeaver Application Server for ABAP and ABAP Platform writes sensitive session identifier information into a diagnostic trace when the trace is activated by a privileged user. An attacker with access to the resulting trace data could obtain identifiers that allow impersonation of legitimate...
CVE-2026-14167: Incorrect Authorization
A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization...
PT-2026-65414
A low privileged remote attacker can perform privileged configuration changes reserved for the administrator level including permission management due to incorrect authorization...
PT-2026-65592
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5 2, 6.2.1.0 through 6.2.1.1 2, and 6.2.2.0 through 6.2.2.0 1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5 2, 6.2.1.0 through 6.2.1.1 2, and 6.2.2.0 through 6.2.2.0 1 stores potentially sensitive information in log files that could be rea...
CVE-2026-1918: Insertion of Sensitive Information into Log File
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.52, 6.2.1.0 through 6.2.1.12, and 6.2.2.0 through 6.2.2.01 stores potentially sensitive information in log files that could be read by a...
CVE-2021-32085
An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. It installs with default user credentials. The report and R1 MySQL accounts have a password of box747, which is publicly known and documented. This allows remote attackers to trivially gain privileged access to the...
CVE-2021-32087
An issue was discovered in Quest KACE Systems Deployment Appliance SMA 11.0.273. It installs with default user credentials. The kbftp account has a password of getbxf, which is publicly known and documented. This allows remote attackers to trivially gain privileged access to the FTP service...
Directory Traversal
Overview thorsten/phpmyfaq is a FAQ system for PHP and MySQL, PostgreSQL and other databases Affected versions of this package are vulnerable to Directory Traversal via insufficient sanitization of the existingimage field during category updates. An attacker can delete arbitrary files by exploiti...
CVE-2026-65617
A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions...
CVE-2026-42017
An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions...
CVE-2026-12001
A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5. Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through...
CVE-2026-12001 Hardcoded Credential Vulnerability in Multiple TP-Link Router Models
A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5. Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through...
CVE-2026-12001
The CVE-2026-12001 entry describes a hardcoded credential vulnerability in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, Archer C20 v6, Archer MR200 v5). The credential material is embedded in a password file within the firmware image and can be recovered through firmware ...
CVE-2026-65617
Technical details (affected component, exact root cause, affected versions, exploitability) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2026-65617 Potential remote code execution on an Artifactory package service container.
A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions...
EUVD-2026-49579
A deserialization weakness in JFrog Artifactory package handling could allow a low-privileged user to impact confidentiality, integrity, and availability under specific repository conditions...
EUVD-2026-49568
An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions...
CVE-2026-42017 Privilege escalation via JFrog Worker event token exposure
An event-handling weakness in JFrog Artifactory could expose privileged authorization material to a lower-privileged user under specific conditions...