128756 matches found
CVE-2026-24321
SAP Commerce Cloud exposes multiple API endpoints to unauthenticated users, allowing them to submit requests to these open endpoints to retrieve sensitive information that is not intended to be publicly accessible via the front-end. This vulnerability has a low impact on confidentiality and does...
CVE-2026-24319
In SAP Business One, sensitive information is written to the application�s memory dump files without obfuscation. Gaining access to this information could potentially lead to unauthorized operations within the B1 environment, including modification of company data. This issue results in a high...
CVE-2026-24312
An erroneous authorization check in SAP Business Workflow leads to privilege escalation. An authenticated administrative user can bypass role restrictions by leveraging permissions from a less sensitive function to execute unauthorized, high-privilege actions. This has a high impact on data...
CVE-2026-24322
SAP Solution Tools Plug-In ST-PI contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability...
CVE-2026-25813
PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, The application logs highly sensitive data directly to console output without masking or redaction...
[SECURITY] Fedora 42 Update: rust-resctl-bench-2.2.5-10.fc42
resctl-bench is a collection of whole-system benchmarks to evaluate resource control and hardware behaviors using realistic simulated workloads. Comprehensive resource control involves the whole system. Furthermore, testing resource control end-to-end requires scenarios involving realistic...
[SECURITY] Fedora 42 Update: rust-rd-hashd-2.2.5-10.fc42
Latency-sensitive pseudo workload for resctl-demo...
PT-2026-7744
Name of the Vulnerable Software and Affected Versions macOS versions prior to Tahoe 26.3 Description An application possessing root privileges may be capable of accessing private information due to insufficient redaction of sensitive data. Recommendations Update to macOS Tahoe 26.3...
CVE-2024-26477
An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the api parameter of the oauth, amazonsns, export endpoints...
QNAP Systems File Station 5 安全漏洞
QNAP Systems File Station 5 is a file management system developed by QNAP Systems, a company based in Taiwan, China. Versions of QNAP Systems File Station 5 prior to 5.5.6.5166 contained security vulnerabilities. These vulnerabilities were due to weak authentication mechanisms, which could lead t...
PT-2026-7776
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.3 and iPadOS 26.3, iOS 18.7.5 and iPadOS 18.7.5. An attacker with physical access to a locked device may be able to view sensitive user information...
Apple macOS 安全漏洞
Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS prior to Sonoma 14.8.4 contained a security vulnerability caused by path handling issues, which could allow applications to access sensitive user data...
PT-2026-7653
Name of the Vulnerable Software and Affected Versions Statping-ng version 0.91.0 Description An issue exists that allows an attacker to obtain sensitive information via a crafted request to the Command execution function. The issue is present in the Command execution function. Recommendations At...
Apple macOS 安全漏洞
Apple macOS Tahoe is an operating system from the American company Apple. Apple macOS Tahoe suffers from an information disclosure vulnerability that can be exploited by attackers to access sensitive user data...
Apple macOS 安全漏洞
Apple macOS is a specialized operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Tahoe 26.3 and earlier contained a security vulnerability caused by an authorization issue, which could allow applications to access sensitive user data...
PT-2026-7780
Name of the Vulnerable Software and Affected Versions watchOS versions prior to 26.3 iOS versions prior to 26.3 iPadOS versions prior to 26.3 tvOS versions prior to 26.3 macOS versions prior to Tahoe 26.3 Description A logging issue allowed potential viewing of sensitive user information due to...
PT-2026-27537
Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.7 iPadOS versions prior to 18.7.7 macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.3 visionOS versions prior to 26.3 iOS versions 26.3 iPadOS versions 26.3...
CVE-2024-26479
An issue in Statping-ng v.0.91.0 allows an attacker to obtain sensitive information via a crafted request to the Command execution function...
CVE-2024-26478
CVE-2024-26478 affects Statping-ng v0.91.0, where a flaw in the /api/users endpoint can lead to disclosure of sensitive information. Public sources consistently identify the issue as an authorization/privacy weakness tied to that endpoint; Red Hat, NVD, OSV, and third-party advisories reference t...