CVE-2023-40772

CVE-2023-40772 is a directory traversal vulnerability in DataEase versions prior to 1.18.10 , located in the StaticResourceController.java component. A remote attacker with low privileges can craft a request to this controller to read sensitive information, resulting in a low confidentiality impa...

ROS-20260914-73-0057

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260914-73-0046

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260914-73-0022

The vulnerability of the WebSockets component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

PT-2026-91430

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to improper request validation...

PT-2026-91420

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log...

PT-2026-91435

IBM Cloud Pak for Data System Yosemite 1.0 3.0.5.2 could allow a remote attacker to obtain sensitive information due to the use of weak or deprecated cryptographic protocols...

ROS-20260914-73-0116

The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-91474

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10. A remote attacker may be able to cause a denial-of-service...

PT-2026-91504

The issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory...

PT-2026-91532

Name of the Vulnerable Software and Affected Versions macOS Golden Gate versions prior to 27 macOS Sequoia versions prior to 15.8 macOS Tahoe versions prior to 26.7 Description An out-of-bounds read occurs due to insufficient bounds checking, which may allow a remote attacker to cause unexpected...

CVE-2026-19290: Improper Access Control

IBM Sterling File Gateway 6.2.0.0 through 6.2.0.61, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control...

CVE-2026-16188: Improper Output Neutralization for Logs

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to inject forged log entries into the server's administrative log...

CVE-2023-40772: Relative Path Traversal

A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component...

ROS-20260914-73-0091

The vulnerability in Chromium is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Cisco Secure Email Gateway SQL Injection Vulnerability

Cisco AsyncOS software for Cisco Secure Email Gateway SEG contains a SQL injection vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system...

PT-2026-91452

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths...

PT-2026-91418

IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication on an admin console servlet...

PT-2026-91463

Name of the Vulnerable Software and Affected Versions IBM Verify Identity Access affected versions not specified Description IBM Verify Identity Access lacks origin validation, which may enable a remote attacker to perform operations on behalf of a victim and potentially launch subsequent attacks...

The vulnerability of the Windows Routing and Remote Access Service (RRAS) on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Routing and Remote Access Service RRAS on Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...