CVE-2026-107525

Dell PowerStore contains an information disclosure vulnerability. An unauthenticated attacker could exploit this vulnerability to obtain service metadata useful for further attacks...

CVE-2026-107525

Dell PowerStore is affected by an information disclosure vulnerability. An unauthenticated attacker can exploit this flaw to obtain service metadata , which could be leveraged to facilitate further attacks. A security update is available via Dell's official support documentation (DSA-2026-479). N...

EUVD-2026-125293

Dell PowerStore contains an information disclosure vulnerability. An unauthenticated attacker could exploit this vulnerability to obtain service metadata useful for further attacks...

CVE-2026-107525

Dell PowerStore contains an information disclosure vulnerability. An unauthenticated attacker could exploit this vulnerability to obtain service metadata useful for further attacks...

PT-2026-146833

Dell PowerStore contains an information disclosure vulnerability. An unauthenticated attacker could exploit this vulnerability to obtain service metadata useful for further attacks...

Forced Browsing

Overview org.apache.axis2:axis2-transport-http is a Web Services / SOAP / WSDL engine Affected versions of this package are vulnerable to Forced Browsing of service metadata, because the exposeServiceMetadata parameter is enforced only on the ?wsdl, ?wsdl2, and ?xsd queries in HTTPWorker and...

Forced Browsing

Overview Affected versions of this package are vulnerable to Forced Browsing of service metadata, because the exposeServiceMetadata parameter is enforced only on the ?wsdl, ?wsdl2, and ?xsd queries in HTTPWorker and ListingAgent. An anonymous caller can read the operation names and the request an...

Forced Browsing

Overview Affected versions of this package are vulnerable to Forced Browsing of service metadata, because the exposeServiceMetadata parameter is enforced only on the ?wsdl, ?wsdl2, and ?xsd queries in HTTPWorker and ListingAgent. An anonymous caller can read the operation names and the request an...

Forced Browsing

Overview Affected versions of this package are vulnerable to Forced Browsing of service metadata, because the exposeServiceMetadata parameter is enforced only on the ?wsdl, ?wsdl2, and ?xsd queries in HTTPWorker and ListingAgent. An anonymous caller can read the operation names and the request an...

Forced Browsing

Overview org.apache.axis2:axis2-kernel is a Web Services / SOAP / WSDL engine, the successor to the widely used Apache Axis SOAP stack. Affected versions of this package are vulnerable to Forced Browsing of service metadata, because the exposeServiceMetadata parameter is enforced only on the ?wsd...

CVE-2026-33522

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...

CVE-2026-33522 BUG-000182936 - ArcGIS Server has a security vulnerability.

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...

CVE-2026-33522

Esri ArcGIS Server versions 11.3 through 12.0 are vulnerable to a security flaw allowing a remote, unauthenticated attacker to update service metadata . The root cause is identified as Improper Authorization (CWE-285). A patch is available for versions 12.0, 11.5, and 11.3 in General Availability...

EUVD-2026-110060

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...

CVE-2026-33522 BUG-000182936 - ArcGIS Server has a security vulnerability.

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...

PT-2026-125081

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...

Esri ArcGIS Server authorization issue vulnerability

Versions 11.3 through 12.0 of Esri ArcGIS Server contain an authorization issue vulnerability. This vulnerability stems from improper permission control, allowing remote unauthenticated attackers to update service metadata...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerabilities have been resolved: ath9khtc: fixed uninitialized values issues Syzbot reported 2 KMSAN bugs in ath9k. All of these bugs are caused by missing field initialization. In htcconnectservice, svcmetalen and pad are not initialized. Based on the code, ...

PT-2026-44798

Name of the Vulnerable Software and Affected Versions OpenShift Router affected versions not specified Description A flaw in the OpenShift Router allows a user with EndpointSlice write access to proxy requests to a cloud metadata endpoint. This is achieved by creating a Service backed by a Fully...

Malicious code in @f5rest/odata-v4-service-metadata (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3183cb83976cbb4d5011bae853bc65c285e5204ca17b1435d5ce6801dcfd9e2a The package @f5rest/odata-v4-service-metadata was found to contain malicious code...