29819 matches found
MINI-JX26-2WHC-5QJH
Bulletin has no description...
Amazon Linux 2 : rclone, --advisory ALAS2-2026-3264 (ALAS-2026-3264)
"The version of rclone installed on the remote host is prior to 1.55.1-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3264 advisory. gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper...
ROS-20260430-73-0011
Vulnerability in golang related to incorrect reference definition before accessing a file. Exploitation of the vulnerability may allow an attacker to escalate his privileges...
PT-2026-36190
Name of the Vulnerable Software and Affected Versions IBM Langflow Desktop versions 1.0.0 through 1.8.4 Description An unauthenticated user can view images belonging to other users. This is possible due to an indirect object reference through a user-controlled key. Recommendations At the moment,...
CVE-2026-4503: Authorization Bypass Through User-Controlled Key
IBM Langflow Desktop 1.0.0 through 1.8.4 Langflow could allow an unauthenticated user to view other users' images due to an indirect object reference through a user-controlled key...
CVE-2024-13971: Improper Restriction of XML External Entity Reference
Unauthenticated attackers can exploit a weakness in the XML parser functionality of Lobsterpro prior to version 4.12.6-GA. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services...
CVE-2025-14543: Improper Restriction of XML External Entity Reference
Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional Core Libraries allows Serialized Data External Linking. This issue affects Connext Professional: from 7.4.0 before 7.7.0, from 7.0.0 before 7.3.1.1, from 6.1.0 before 6.1., from 6.0.0 before 6.0., from...
CVE-2024-39847: Improper Restriction of XML External Entity Reference
Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services...
MINI-V2M4-4P26-PFFG
Bulletin has no description...
MINI-6XH8-HCHH-WJ29
Bulletin has no description...
MINI-2QJX-JR6F-4RR2
Bulletin has no description...
MINI-Q38R-8WG3-7449
Bulletin has no description...
MINI-5PVQ-GMQX-4CP4
Bulletin has no description...
MINI-52RH-RXCV-W42M
Bulletin has no description...
CLSA-2026-1777455447 openssl: Fix of CVE-2026-28387
CVE-2026-28387: fix use-after-free / double-free in danematch by releasing the previously stored dane-mcert with X509free instead of OPENSSLfree; the slot is reference-bumped via X509upref so the matching free is X509free...
MINI-P942-VHRX-MXRX
Bulletin has no description...
CVE-2026-42515 Insecure Direct Object Reference (IDOR) Vulnerability in e-Sushrut HMIS
This vulnerability exists in e-Sushrut due to improper access control in resource access validation. An authenticated attacker could exploit this vulnerability by manipulating parameter in the API request URL to gain unauthorized access to sensitive information of patients on the targeted system...
MINI-X5MW-RGV9-R62R
Bulletin has no description...
libxml2: libxml2: Denial of Service via crafted XSD-validated document
A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition XSD validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that...