121423 matches found
CVE-2026-17614
A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile and getConfigurationFile methods in wildfly-core/deployment-repository do not validate that the resolved file path remains within the configured repository or configuration root directories. A...
EUVD-2026-52534
Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-52528
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-52532
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering over a network...
EUVD-2026-52535
Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
EUVD-2026-52521
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
EUVD-2026-52525
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...
EUVD-2026-52523
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally...
EUVD-2026-52514
Adobe Campaign Classic ACC is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require...
CVE-2026-66316
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66325
Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66322
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66326
Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2026-66311
Missing authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...
CVE-2026-66313
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...
CVE-2026-65804
Improper control of generation of code 'code injection' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-45646
A flaw was found in ASP.NET Core. This vulnerability allows an unauthorized remote attacker to cause a Denial of Service DoS by allocating resources without limits or throttling. This can lead to the affected system becoming unresponsive or unavailable to legitimate users...
Schneider Electric EcoStruxure Panel Server Initialization of a Resource with an Insecure Default (CVE-2026-6866)
CWE-1188 Initialization of a Resource with an Insecure Default vulnerability exists that could cause unauthorized disclosure of sensitive information when credentials revert to initial settings in rare circumstances, enabling unauthorized authentication using known credentials. This plugin only...
CVE-2026-48399
Adobe Campaign Classic ACC is affected by a Violation of Secure Design Principles vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require...
