CVE-2016-6271

CVE-2016-6271 CVE-2016-6271 impacts libbzrtp, which is a ZRTP library developped by Belledonne Communications. This library is embedded in end-user applications, for example linphone, which is available as an Android app on Play store. Current version 3.2.7 embeds a version of libbzrtp shall not ...

Vulnerability fixed in Fortinet FortiSandbox

Fortinet has addressed a vulnerability in multiple versions of FortiSandbox. The vulnerability is a Cross-Site Scripting XSS issue resulting from insufficient input sanitization during web page generation. An unauthenticated attacker can exploit this vulnerability by sending specially crafted HTT...

CVE-2026-118798

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise...

CVE-2026-118798 Multiple sensitive authentication data exposed

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise...

CVE-2026-118798

The CompuGroup Medical Wingesfar software is affected by CVE-2026-118798, where multiple sensitive authentication data types are exposed. The vulnerability stems from the inclusion of credentials , OAuth-related secrets , session information , and authentication artifacts within application logs ...

EUVD-2026-120033

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise...

CVE-2026-118798: CompuGroup Medical Wingesfar: Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and…

Multiple sensitive authentication data, including credentials, OAuth-related secrets, session information, and authentication artifacts, are exposed through application logs and persistent client-side storage, enabling unauthorized access and session compromise...

CVE-2026-117623

A flaw was found in Jenkins. A stored cross-site scripting XSS vulnerability exists because the application does not properly sanitize text displayed in breadcrumb bar overflow menu tooltips. An authenticated user with read permissions can exploit this issue by injecting malicious script code. Wh...

CVE-2026-105987

KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a stickynote annotation. When any user opens the document, the viewer renders the annotation and the browser...

CVE-2026-105987

The KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API . The root cause is a lack of input validation, allowing an authenticated attacker to inject arbitrary JavaScript payloads into a stickynote annotation . When other users open the affected document, the browser execute...

CVE-2026-105987 Stored XSS in KGS Software tia Viewer

KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a stickynote annotation. When any user opens the document, the viewer renders the annotation and the browser...

EUVD-2026-110926

KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a stickynote annotation. When any user opens the document, the viewer renders the annotation and the browser...

PT-2026-126610

KGS Software tia Viewer is vulnerable to Stored XSS via the annotation API. Due to the lack of input validation, an authenticated attacker can inject arbitrary JavaScript payload into a stickynote annotation. When any user opens the document, the viewer renders the annotation and the browser...

CVE-2026-114570

A flaw was found in WordPress. Insufficient escaping of user display names in the Quick Edit feature allows an authenticated user with contributor-level privileges to conduct stored Cross-Site Scripting XSS attacks. By submitting malicious scripts, an attacker can cause them to execute within the...

CVE-2026-115519

The KNIME Business Hub (versions prior to 1.19.0 ) is vulnerable to session compromise because sensitive cookies lack the 'Secure' and 'HttpOnly' attributes. This flaw allows an unauthenticated remote attacker to hijack user sessions if secondary vulnerabilities, such as a cross-site scripting (X...

CVE-2026-115519 Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not...

EUVD-2026-108279

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not...

CVE-2026-115519 Sensitive cookies without 'Secure' and 'HttpOnly' attributes in KNIME Business Hub

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not...

PT-2026-121508

Missing security attributes on sensitive cookies in KNIME Business Hub before version 1.19.0 allow an unauthenticated remote attacker to compromise user sessions if other security issues such as a cross-site scripting vulnerability or a man-in-the-middle attack are present. A workaround is not...

Knime Business Hub session mechanism vulnerability

Versions of KNIME Business Hub prior to 1.19.0 contain a session mechanism vulnerability. This vulnerability stems from the absence of security attributes on sensitive cookies, which may allow unauthenticated remote attackers to compromise user sessions despite other security issues such as...