39834 matches found
CVE-2026-10154 Dolibarr ERP CRM messaging.php authorization
A vulnerability has been found in Dolibarr ERP CRM 23.0.0/23.0.1/23.0.2. The affected element is an unknown function of the file htdocs/user/messaging.php. Such manipulation of the argument ID leads to authorization bypass. The attack can be executed remotely. Upgrading to version 23.0.3 is...
CVE-2026-10153
A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...
CVE-2026-10153 westboy CicadasCMS AbstractCacheManager.java search cross site scripting
A flaw has been found in westboy CicadasCMS up to 2431154dac8d0735e04f1fd2a3c3556668fc8dab. Impacted is the function Search of the file org/springframework/cache/support/AbstractCacheManager.java. This manipulation of the argument s causes cross site scripting. Remote exploitation of the attack i...
jmc security update
An update is available for jmc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list JDK Mission Control is a powerful profiler for HotSpot JVMs and has an advanced s...
CVE-2018-25418 AiOPMSD Final 1.0.0 SQL Injection via year.php
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the year parameter. Attackers can send GET requests to year.php with crafted SQL payloads in the year parameter to extract sensiti...
CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6
CVE-2026-39821 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...
CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6
CVE-2026-25680 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...
CVE-2026-39828 affecting package packer for versions less than 1.9.5-14
CVE-2026-39828 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
CVE-2026-39821 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6
CVE-2026-39821 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6. A patched version of the package is available...
CVE-2026-42502 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-42502 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...
CVE-2026-42502 affecting package containerized-data-importer for versions less than 1.62.0-5
CVE-2026-42502 affecting package containerized-data-importer for versions less than 1.62.0-5. A patched version of the package is available...
CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6
CVE-2026-27136 affecting package prometheus-adapter for versions less than 0.12.0-6. A patched version of the package is available...
CVE-2026-39829 affecting package packer for versions less than 1.9.5-14
CVE-2026-39829 affecting package packer for versions less than 1.9.5-14. A patched version of the package is available...
[SECURITY] Fedora 43 Update: djvulibre-3.5.30-1.fc43
DjVu is a web-centric format and software platform for distributing documents and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution picture s. DjVu content downloads faster, displays and renders faster,...
[SECURITY] Fedora 44 Update: libssh2-1.11.1-6.fc44
libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS22, SECSH-USERAUTH25, SECSH-CONNECTION23, SECSH-ARCH20, SECSH-FILEXFER06, SECSH-DHGEX04, and SECSH-NUMBERS10...
CVE-2026-39821 affecting package keda for versions less than 2.14.1-13
CVE-2026-39821 affecting package keda for versions less than 2.14.1-13. A patched version of the package is available...
CVE-2026-39830 affecting package cf-cli for versions less than 8.7.11-6
CVE-2026-39830 affecting package cf-cli for versions less than 8.7.11-6. A patched version of the package is available...
CVE-2026-39821 affecting package flannel for versions less than 0.24.2-28
CVE-2026-39821 affecting package flannel for versions less than 0.24.2-28. A patched version of the package is available...
CVE-2026-27136 affecting package docker-compose for versions less than 2.27.0-11
CVE-2026-27136 affecting package docker-compose for versions less than 2.27.0-11. A patched version of the package is available...