CVE-2026-101278 Trusted Domain Project OpenDMARC PSL Wildcard opendmarc_tld.c : opendmarc_get_tld origin validation

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...

EUVD-2026-88593

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...

CVE-2026-101281

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcsp2findmailfromdomain of the file libopendmarc/opendmarcspf.c of the component SPF Macro Handler. This manipulation causes improper authentication. The attack is possible...

CVE-2026-101278

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...

CVE-2026-101280: Authentication Bypass by Spoofing

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarcpolicyquerydmarc of the component Multi-Record Set Handler. The manipulation results in authentication bypass by spoofing. The attack can be executed remotely. The exploit is now public...

CVE-2026-101279: Integer Overflow or Wraparound

A security vulnerability has been detected in Trusted Domain Project OpenDMARC up to 1.4.2. This impacts an unknown function of the file libopendmarc/opendmarcpolicy.c of the component DMARC Parser. The manipulation of the argument pct leads to integer overflow. Remote exploitation of the attack ...

CVE-2026-101280

A vulnerability was detected in Trusted Domain Project OpenDMARC up to 1.4.2. Affected is the function opendmarcpolicyquerydmarc of the component Multi-Record Set Handler. The manipulation results in authentication bypass by spoofing. The attack can be executed remotely. The exploit is now public...

CVE-2026-101281: Improper Authentication

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcsp2findmailfromdomain of the file libopendmarc/opendmarcspf.c of the component SPF Macro Handler. This manipulation causes improper authentication. The attack is possible...

CVE-2026-101278: Origin Validation Error

A weakness has been identified in Trusted Domain Project OpenDMARC up to 1.4.2. This affects the function opendmarcgettld of the file libopendmarc/opendmarctld.c : of the component PSL Wildcard Handler. Executing a manipulation can lead to origin validation error. The attack may be launched...

CVE-2026-101277 Trusted Domain Project OpenDKIM Tag Tokenizer dkim.c dkim_process_set less trusted source

A security flaw has been discovered in Trusted Domain Project OpenDKIM up to 2.11.0. The impacted element is the function dkimprocessset of the file dkim.c of the component Tag Tokenizer. Performing a manipulation results in use of less trusted source. The attack may be initiated remotely. The...

CVE-2026-101277 Trusted Domain Project OpenDKIM Tag Tokenizer dkim.c dkim_process_set less trusted source

A security flaw has been discovered in Trusted Domain Project OpenDKIM up to 2.11.0. The impacted element is the function dkimprocessset of the file dkim.c of the component Tag Tokenizer. Performing a manipulation results in use of less trusted source. The attack may be initiated remotely. The...

CVE-2026-101277

A security flaw exists in Trusted Domain Project OpenDKIM versions up to 2.11.0 . The vulnerability originates in the Tag Tokenizer component, specifically within the dkim_process_set function of the dkim.c file. A manipulation can lead to the use of a less trusted source , which may be triggered...

SUSE CVE-2026-100866

onefetch through 2.28.1 writes repository information field values to the terminal without removing control characters, allowing terminal escape sequence injection. Attackers can embed ANSI/OSC escape sequences in project manifest version and name fields to manipulate terminal output, rewrite...

SUSE CVE-2026-100888

A weakness has been identified in Trusted Domain Project OpenDKIM up to 2.11.0. This affects the function dkimcanonselecthdrs of the file libopendkim/dkim-canon.c of the component DKIM Signature Header Selection. Executing a manipulation of the argument h can lead to out-of-bounds write. The atta...

GO-2026-6518 Perses's project query parameter authorization bypass exposes cross-project resources in github.com/perses/perses

Perses's project query parameter authorization bypass exposes cross-project resources in github.com/perses/perses...

GO-2026-6528 Perses's unvalidated project parameter enables filesystem path traversal in github.com/perses/perses

Perses's unvalidated project parameter enables filesystem path traversal in github.com/perses/perses...

CVE-2026-15953 Path Traversal During Project Archive Import

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...

CVE-2026-15953

The ABB Protection and control IED manager (PCM600) is vulnerable to a Path Traversal vulnerability during the project archive import process. This issue specifically affects versions through 2.14 . The vulnerability allows for the improper limitation of a pathname to a restricted directory, pote...

CVE-2026-15953 Path Traversal During Project Archive Import

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...

DEBIAN-CVE-2026-101017

A vulnerability was found in Trusted Domain Project OpenDMARC up to 1.4.2. This vulnerability affects the function strcasecmp in the library libopendmarc/opendmarcpolicy.c. The manipulation results in handling of exceptional conditions. The attack can be executed remotely. The exploit has been ma...