143693 matches found
WordPress Total Upkeep (BoldGrid Backup) plugin < 1.17.3 - Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cron_secret (regression of CVE-2020-36848) vulnerability
Unauthenticated Sensitive Data Disclosure and Forced Site Restore via Predictable cronsecret regression of CVE-2020-36848 vulnerability discovered by Jakub Herman in WordPress Plugin Total Upkeep versions 1.17.3...
WordPress Import WP plugin < 2.14.23 - Unauthenticated Sensitive Information Exposure via Export File Download vulnerability
Unauthenticated Sensitive Information Exposure via Export File Download vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Import WP versions 2.14.23...
CVE-2026-74250: Sensitive Information in Resource Not Removed Before Reuse
In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface...
CVE-2026-16905: Improper Authentication
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication...
PT-2026-72101
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments...
PT-2026-72107
Name of the Vulnerable Software and Affected Versions IBM Db2 Mirror for i versions 7.4 through 7.6 Description A remote authenticated attacker can obtain sensitive information because the software does not properly limit pathnames to restricted directories. Recommendations At the moment, there i...
CVE-2026-19631: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials...
CVE-2026-18509
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation via the Navigator for i debugger. This could allow the attacker to access or manipulate sensitive data on the system, or create new profiles with elevated privileges on the IBM i system...
CVE-2026-17088
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability...
Missing Authorization
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Missing Authorization via the response actions. An attacker can execute unauthorized actions on managed hosts and access sensitive...
Incorrect Authorization
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Incorrect Authorization due to the suggested existing field values while a user authors endpoint policy artifacts, which queries...
Missing Authorization
Overview kibana is an open source Apache Licensed, browser-based analytics and search dashboard for Elasticsearch. Affected versions of this package are vulnerable to Missing Authorization via the data retrieval. An attacker can access sensitive endpoint response action records and corresponding...
EUVD-2026-58474
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper processing of XML external entities...
CVE-2026-18509
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation via the Navigator for i debugger. This could allow the attacker to access or manipulate sensitive data on the system, or create new profiles with elevated privileges on the IBM i system...
CVE-2026-17649
CVE-2026-17649 affects IBM i 7.3–7.6 via the NetServer component. A remote attacker could obtain sensitive information due to an out-of-bounds read. IBM lists affected releases and provides PTF fixes: 7.6 MJ10939, 7.5 MJ10938, 7.4 MJ10937, 7.3 MJ10936 (see IBM bulletin). Base score ~5.3 (CVSS3.1)...
CVE-2026-17649 IBM i is Affected By Multiple Vulnerabilities in NetServer
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...
EUVD-2026-58461
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...
CVE-2026-17649
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read...
CVE-2026-17438 IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management...