CVE-2026-126462

OpenEMR versions before 8.5.0 are vulnerable to a stored cross-site scripting (XSS) flaw. Authenticated users with Eye Exam edit permissions can inject malicious scripts via the Next Visit Orders PLAN[] field. By storing a payload that closes the textarea in view.php , an attacker can execute Jav...

EUVD-2026-124962

OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability that allows authenticated users with Eye Exam edit permission to inject scripts via the Next Visit Orders PLAN field. Attackers can store a payload closing the textarea in view.php, executing JavaScript when another user...

CVE-2026-107662

Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to extract arbitrary database values through the banner-zone.php and campaign-zone.php administration pages. Permission checks and database queries obtain identifiers through...

CVE-2026-107662

A blind SQL injection vulnerability exists in Revive Adserver 6.0.8 and earlier versions, affecting the banner-zone.php and campaign-zone.php administration pages. The root cause is an inconsistent request-input precedence where permission checks and database queries retrieve different values for...

EUVD-2026-123624

Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to extract arbitrary database values through the banner-zone.php and campaign-zone.php administration pages. Permission checks and database queries obtain identifiers through...

CVE-2026-107662

Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to extract arbitrary database values through the banner-zone.php and campaign-zone.php administration pages. Permission checks and database queries obtain identifiers through...

CVE-2026-107662

Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to extract arbitrary database values through the banner-zone.php and campaign-zone.php administration pages. Permission checks and database queries obtain identifiers through...

PT-2026-145291

Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to extract arbitrary database values through the banner-zone.php and campaign-zone.php administration pages. Permission checks and database queries obtain identifiers through...

CVE-2026-107662: Revive Adserver: Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to…

Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to extract arbitrary database values through the banner-zone.php and campaign-zone.php administration pages. Permission checks and database queries obtain identifiers through...

CVE-2026-111259

The embedded server generates HTTP session identifiers with a non-cryptographic random number generator by default. A remote attacker who observes a session identifier can predict the identifiers issued to other users and hijack their sessions, if the application relies on HTTP sessions for...

CVE-2026-111259

The embedded server generates HTTP session identifiers with a non-cryptographic random number generator by default. A remote attacker who observes a session identifier can predict the identifiers issued to other users and hijack their sessions, if the application relies on HTTP sessions for...

EUVD-2026-121222

The embedded server generates HTTP session identifiers with a non-cryptographic random number generator by default. A remote attacker who observes a session identifier can predict the identifiers issued to other users and hijack their sessions, if the application relies on HTTP sessions for...

EUVD-2026-121215

Stateful session bean identifiers are not generated from a cryptographically secure random source. A remote attacker with access to the EJB remote endpoint who holds one valid identifier can derive those of other clients' sessions and invoke methods on their beans, exposing or modifying other...

CVE-2026-87755

Apache TomEE is vulnerable to stateful session bean hijacking because identifiers are not generated from a cryptographically secure random source. A remote attacker with access to the EJB remote endpoint and one valid identifier can derive identifiers for other clients' sessions. This allows the ...

CVE-2026-87755 Apache TomEE: Stateful session bean hijacking via predictable session identifiers

Stateful session bean identifiers are not generated from a cryptographically secure random source. A remote attacker with access to the EJB remote endpoint who holds one valid identifier can derive those of other clients' sessions and invoke methods on their beans, exposing or modifying other...

CVE-2026-111259: Apache Software Foundation Apache TomEE: The embedded server generates HTTP session identifiers with a non-cryptographic random number generator by default

The embedded server generates HTTP session identifiers with a non-cryptographic random number generator by default. A remote attacker who observes a session identifier can predict the identifiers issued to other users and hijack their sessions, if the application relies on HTTP sessions for...

PT-2026-141725

Stateful session bean identifiers are not generated from a cryptographically secure random source. A remote attacker with access to the EJB remote endpoint who holds one valid identifier can derive those of other clients' sessions and invoke methods on their beans, exposing or modifying other...

PT-2026-141737

The embedded server generates HTTP session identifiers with a non-cryptographic random number generator by default. A remote attacker who observes a session identifier can predict the identifiers issued to other users and hijack their sessions, if the application relies on HTTP sessions for...

CVE-2026-8642

IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 exposes debug endpoints that disclose system information including server versions and session identifiers. This information can be used to identify vulnerable software versions...

CVE-2026-8642 IBM Verify Directory is affected by multiple vulnerabilities

IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 exposes debug endpoints that disclose system information including server versions and session identifiers. This information can be used to identify vulnerable software versions...