277901 matches found
Apache Spark UI - Remote Command Injection
Apache Spark UI is susceptible to remote command injection. ACLs can be enabled via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilte...
Dahua IPC/VTH/VTO - Authentication Bypass
The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. id: CVE-2021-33045 info: name: Dahua IPC/VTH/VTO - Authentication Bypass author: phantomowl severity:...
PT-2026-78499
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
PT-2026-78492
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. T...
CVE-2026-62596
Oracle Siebel CRM (component: Open Integration), versions 25.12–26.6, is vulnerable to an easily exploitable flaw allowing a low-privileged attacker with network HTTP access to compromise the system, with scope change potentially affecting additional products. CVSS 3.1 score: 8.5 (HIGH). Oracle's...
CVE-2026-62462
Oracle E-Business Suite Work in Process (component: Internal Operations) versions 12.2.3-12.2.15 is vulnerable. A low-privileged attacker with network access via HTTP can exploit it for full CIA impact (CVSS 8.8 HIGH). Oracle's August 2026 CPU advisory is referenced for patch details; no exploit ...
NPM: MagicMirror: ssrf calendar .js
NPM: MagicMirror: ssrf calendar .js vulnerability discovered by ? in WordPress Npm magicmirror versions 2.37.0...
Important: Red Hat Security Advisory: Migration Toolkit for Applications
A new version of Migration Toolkit for Applications MTA is now available. Migration Toolkit for Applications MTA accelerates large-scale application modernization efforts across hybrid cloud environments on Red Hat OpenShift. This solution provides insight throughout the adoption process, at both...
MINI-HM59-MVVM-37H7
Bulletin has no description...
MINI-589Q-PR3P-PJ38
Bulletin has no description...
GHSA-FHGH-WQ4Q-R37X
creationtimestamp| type| source ---|---|--- 2026-08-17 20:32:43+00:00| seen| https://gist.github.com/alon710/714a45d6d9776f210b84a676518696fb...
MINI-R5VG-JJX2-6FWX
Bulletin has no description...
MINI-3V2Q-CQ5P-W779
Bulletin has no description...
MINI-2XHM-4QGP-C6M4
Bulletin has no description...
MINI-J4HF-F74G-JWQ5
Bulletin has no description...
MINI-R2V2-9MRP-946J
Bulletin has no description...
MINI-35F4-968R-PGMF
Bulletin has no description...
EUVD-2026-60439
A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the file /admin/getbarcodedata.php. This manipulation of the argument barcode causes sql injection. The attack may be initiated remotely. The exploit has been published and may...