107752 matches found
EUVD-2026-45990
Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request...
PT-2026-61734
Name of the Vulnerable Software and Affected Versions FlareSolverr versions prior to 3.4.7 Description A server-side request forgery SSRF issue exists in the '/v1' API endpoint. This flaw allows a remote attacker to induce the server to make requests to an unintended location, potentially enablin...
The vulnerability of the IOCTL dispatcher in the ASUS System Control Interface (ASCI) driver and the set of tools for managing and protecting corporate devices provided by ASUS Business Manager, which allows a malicious actor to disclose protected information or cause service failures.
The vulnerability of the IOCTL handler of the ASCI driver allows an attacker to exploit it to disclose protected information or cause service failures. This vulnerability is related to errors that occur during the update of the link counters. Exploiting this vulnerability could enable a remote...
The vulnerability of the wazuh-analysisd module of the Wazuh security monitoring and threat detection platform allows a malicious actor to cause a service failure.
The vulnerability of the wazuh-analysisd module of the security monitoring and threat detection platform Wazuh is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CVE-2026-51026
CVE-2026-51026 affects FileThingie v2.5.7 with a directory traversal vulnerability that allows a remote attacker to obtain sensitive information via a crafted request. CVSSv3.1 metrics show AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (base score 6.5, MEDIUM). No remediation details are provided in the su...
PT-2026-61545
An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the system certificates view due to improper neutralization of special elements in an OS command. This can result in a total loss of confidentiality, availability and integrity...
Vulnerability of the JavaScript component: Mozilla Firefox’s WebAssembly browser allows attackers to disclose protected information.
JavaScript component vulnerability: Mozilla Firefox’s WebAssembly browser is vulnerable due to an incorrect pointer dereferencing. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information...
The vulnerability of the Content Credentials SDK libraries, related to insufficient validation of input data, allows attackers to trigger service failures.
The vulnerability of the Content Credentials SDK libraries is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures...
Cisco ASA/FTD Observable Discrepancy (CVE-2022-20866)
A vulnerability in the handling of RSA keys on devices running Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to retrieve an RSA private key. This vulnerability is due to a logic error when the RSA key...
OESA-2026-3011 mod_auth_openidc security update
This module enables an Apache 2.x web server to operate as an OpenID Connect Relying PartyRP to an OpenID Connect ProviderOP. Security Fixes: An out-of-bounds read and a one-byte out-of-bounds write exist in the state-cookie parser of modauthopenidc. oidcstatecookiesparsetoken src/state.c scans a...
DEBIAN-CVE-2026-56741
JLine is a Java library for handling console input. Prior to 3.30.14, 4.0.16, and 4.2.1, the JLine3 Telnet server remote-telnet module does not apply an upper bound to terminal dimensions received via the Telnet NAWS option, and TelnetIO.handleNAWS in TelnetIO.java:856-879 reads client-supplied...
CVE-2026-52203
An issue in MCMS v.6.1.1 allows a remote attacker to obtain sensitive information via the source parameter...
CVE-2026-50274
Datadog dd-trace-go is a Go client library for Datadog application performance monitoring, profiling, and security monitoring. Prior to 2.8.1, Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing DDTRACEBAGGAGEMAXITEMS or...
CVE-2026-8861
IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...
CVE-2026-4942
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message and downgrade the Transport Layer Security TLS protocol to a version disabled in the server configuration...
CVE-2026-14979 IBM Engineering Lifecycle Management - Jazz Foundation is vulnerable to XML Entity Expansion attack
IBM Engineering Lifecycle Management 7.0.3 Interim Fix 001 through Interim Fix 021, 7.1.0 Interim Fix 001 through Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service due to improper handling of XML entity expansion...
CVE-2026-15322
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to obtain sensitive information due to the exposure of session tokens in URLs...
CVE-2026-15322
CVE-2026-15322 affects IBM Engineering AI Hub versions 1.0.0, 1.1.0, and 1.2.0, where session tokens exposed in URLs could allow a remote attacker to obtain sensitive information. The IBM Security Bulletin confirms this issue under CVE-2026-15322 and states remediation is available in IBM Enginee...
CVE-2026-4942
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message and downgrade the Transport Layer Security TLS protocol to a version disabled in the server configuration...
CVE-2026-4942 IBM i is Affected by Algorithm Downgrade in Transport Layer Security []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message and downgrade the Transport Layer Security TLS protocol to a version disabled in the server configuration...