160371 matches found
CVE-2026-18184 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to obtain sensitive information due to an XML external entity XXE injection flaw...
EUVD-2026-85349
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key...
CVE-2026-18181
The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to an authentication bypass. A hard-coded cryptographic key allows a remote attacker to bypass security controls and gain access to sensitive information . No specific exploit details, affected versions, or remediation...
CVE-2026-18181 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to bypass authentication and access sensitive information due to a hard-coded cryptographic key...
CVE-2026-73588
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-61413
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...
UBUNTU-CVE-2026-92164
Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting cross-protocol redirects. A remote server controlling an HTT...
CVE-2026-73591
Dell Secure Connect Gateway (SCG) Policy Manager , specifically versions prior to 5.34.00.16 , is affected by an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could exploit this flaw to cause Information exposure . No specific deta...
CVE-2026-92164
The CLI utility Streamlink is vulnerable to a local file disclosure flaw in versions prior to 8.6.0 . The HTTPSession component mounts a FileAdapter for the file scheme but fails to reject cross-protocol redirects inherited from requests.Session. An attacker controlling a remote server reachable ...
CVE-2026-68536
A flaw was found in Apache MyFaces Core. This vulnerability allows a remote attacker to perform Server-Side Request Forgery SSRF, which can trick the server into making requests to arbitrary domains, potentially accessing internal resources. Additionally, Local File Inclusion LFI is possible,...
CVE-2026-18177
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks...
CVE-2026-71178
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-71178
The Dell Secure Connect Gateway (SCG) Policy Manager , versions prior to 5.34.00.16 , is vulnerable to an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthenticated attacker with remote access could potentially exploit this flaw to gain Unauthorized access . No s...
EUVD-2026-85330
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...
Plug: quadratic-time decoding of nested query/body parameters enables denial of service
Summary Plug's nested-parameter decoder Plug.Conn.Query parses URL-encoded keys in time quadratic in their bracket-nesting depth. Any unauthenticated remote attacker that can reach a Plug-based HTTP endpoint can pin a BEAM scheduler for minutes with a single small request. Details For a key like...
EUVD-2026-85325
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to clear active chat sessions due to improper authorization...
CVE-2026-18179
The IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to an issue where a remote attacker can clear active chat sessions. This is caused by improper authorization (CWE-862). The vulnerability impacts versions 4.0.6.0 - 4.0.6.0 iFix6 Refresh (Operator 4.4.6+20260807.081800...
CVE-2026-18177 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks...
CVE-2026-18177
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to a security flaw where a remote attacker can execute unauthorized payment actions . The root cause is missing authorization checks (CWE-862), which could lead to high integrity impact and low availability impact. This vu...
CVE-2026-18177 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to execute unauthorized payment actions due to missing authorization checks...