297024 matches found
CVE-2026-18110 Concrete CMS 9.0.0 through 9.5.2 is vulnerable to missing authorization in the user selector autocomplete endpoint (/ccm/system/user/autocomplete), allowing an unauthenticated attacker to retrieve the complete backend user directory — internal ID, username
Concrete CMS 9 9.0.0 through 9.5.2 does not perform an authorization check on the user selector autocomplete endpoint /ccm/system/user/autocomplete, which backs the "Preview as User" panel and other user-selector components. The endpoint validates only a CSRF-style access token that is bound to t...
CVE-2026-18110
Concrete CMS 9 9.0.0 through 9.5.2 does not perform an authorization check on the user selector autocomplete endpoint /ccm/system/user/autocomplete, which backs the "Preview as User" panel and other user-selector components. The endpoint validates only a CSRF-style access token that is bound to t...
EUVD-2026-78826
A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used...
CVE-2026-91854 code-projects Record Management System reg.php cross site scripting
A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used...
CVE-2026-91854 code-projects Record Management System reg.php cross site scripting
A vulnerability was identified in code-projects Record Management System 1.0. Affected is an unknown function of the file main/reg.php. Such manipulation of the argument desc leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used...
CVE-2026-91854
A stored Cross-Site Scripting (XSS) vulnerability in code-projects Record Management System 1.0 , located in an unknown function of main/reg.php . Manipulating the desc parameter leads to script injection. The attack is remotely exploitable and requires user interaction (CVSS 3.1 base score: 4.3 ...
CVE-2026-84400
creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:26+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08...
CVE-2026-62654
creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:20+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05...
CVE-2026-62649
creationtimestamp| type| source ---|---|--- 2026-09-15 16:16:12+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-05...
CVE-2026-58113
creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:47+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-07...
CVE-2026-81321
creationtimestamp| type| source ---|---|--- 2026-09-15 16:15:27+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-08 2026-09-18 18:08:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvsr7gyplc2t 2026-09-18 21:40:07+00:00| seen|...
CVE-2026-55775 OpenBao's System Backend allows Unauthorized Management of the containing Namespace
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespace canonicalization. The /sys/namespaces/ endpoint family ca...
CVE-2026-55775 OpenBao's System Backend allows Unauthorized Management of the containing Namespace
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespace canonicalization. The /sys/namespaces/ endpoint family ca...
CVE-2026-55775 OpenBao's System Backend allows Unauthorized Management of the containing Namespace
OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao users granted capabilities on /sys/namespaces/root within a non-root namespace could exploit special handling of the literal root path in namespace canonicalization. The /sys/namespaces/ endpoint family ca...
Security Bulletin: Enterprise Content Managemant System Monitor for August 2026 - multiple CVEs
Summary Enterprise Content Management System Monitor is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details...
Security Bulletin: Enterprise Content Managemant System Monitor for August 2026 - multiple CVEs
Summary Enterprise Content Management System Monitor is vulnerable to multiple remote code execution and denial of service attacks in third party and open source used in the product for various functions. See full list below. The vulnerabilities have been addressed. Vulnerability Details...
CVE-2026-91996
lamp-cloud through 5.10.0 whitelists the path pattern //anno/ for anonymous access, allowing unauthenticated attackers to read the server's full JVM system property map. Attackers can send POST requests to /defGenProject/anno/getProperties to retrieve sensitive information including JVM classpath...
USN-8761-1: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...
USN-8761-1 linux-azure vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...
USN-8730-2 linux-azure vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;...