1033599 matches found
CVE-2026-97404
In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticated remote attacker who knows a target project's UUID may bypass both Keystone authentication and pre-signed URL verification, resulting in...
EUVD-2026-85915
In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending a request with an empty URL-Signature header, an unauthenticated remote attacker who knows a target project's UUID may bypass both Keystone authentication and pre-signed URL verification, resulting in...
CVE-2026-97404
In OpenStack Zaqar versions before 22.0.2 , the WSGI transport mishandles the URL-Signature header . An unauthenticated remote attacker who knows a target project's UUID can bypass Keystone authentication and pre-signed URL verification by sending a request with an empty URL-Signature header. Thi...
CVE-2026-82094 DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directories on the system due to improper limitation of a pathname to a restricted directory...
CVE-2026-82094
IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a path traversal vulnerability (CWE-22 ) due to improper limitation of a pathname to a restricted directory. A remote authenticated attacker could exploit this to traverse directories on the system. IBM strongly recommends upgrading to ...
EUVD-2026-85914
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directories on the system due to improper limitation of a pathname to a restricted directory...
EUVD-2026-85913
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to unsafe deserialization of untrusted data...
CVE-2026-82093 DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to unsafe deserialization of untrusted data...
CVE-2026-82093
IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to arbitrary code execution because of the unsafe deserialization of untrusted data. This flaw could be exploited by a remote authenticated attacker . No specific remediation, exploit details, or affected components beyond the software ver...
CVE-2026-81552 DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of environment variables...
CVE-2026-81552
IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to a flaw that could allow a remote authenticated attacker to execute arbitrary commands . The root cause is identified as the improper neutralization of environment variables . This vulnerability carries a High base severity (CVSS...
EUVD-2026-85912
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of environment variables...
CVE-2026-61820
A flaw was found in pgpartman. A local user with partmanuser privileges, who owns a template table, can exploit a SQL injection issue within the inherittemplateproperties function. By crafting a malicious column name, the user can bypass proper escaping, allowing arbitrary SQL commands to be...
CVE-2026-81549
IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918) due to improper validation of the X-Forwarded-Proto header. This flaw could allow a remote authenticated attacker to obtain sensitive information. To remediate this vulnerability, I...
CVE-2026-81549 DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of the X-Forwarded-Proto header...
CVE-2026-81548
IBM DataStage on Cloud Pak for Data version 5.4.0.0 is vulnerable to OS command injection due to the improper neutralization of special elements used in an OS command. This flaw allows a remote authenticated attacker to execute arbitrary commands . The impact includes potential high severity for ...
EUVD-2026-86016
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command...
CVE-2026-81547 DataStage on Cloud Pak for Data has several vulnerabilities
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to path traversal...
CVE-2026-81547
IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to a path traversal vulnerability (CWE-22), which could allow a remote authenticated attacker to execute arbitrary commands. The vulnerability has a CVSS base score of 8.8 . To remediate this issue, IBM strongly recommends upgrading to Dat...