130521 matches found
CVE-2026-12702
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...
OPENSUSE-SU-2026:21440-1 Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 July 2026 CPU - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. - CVE-2026-46917: partial denial of service via TLS bsc1272223. -...
CVE-2026-12702
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...
EUVD-2026-48531
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...
CVE-2026-12702
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...
CVE-2026-12702
CVE-2026-12702 affects Octopus Deploy. The issue stems from insufficient checks on project trigger actions, enabling an unauthorized user to trigger a deployment. The description notes this occurs in “affected versions” but does not specify exact versions or products beyond Octopus Deploy, nor pr...
CVE-2026-12702
In affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows an unauthorized user to trigger a deployment...
SUSE-SU-2026:22953-1 Security update for java-17-openjdk
This update for java-17-openjdk fixes the following issues - Upgrade to upstream tag jdk-17.0.20+8 July 2026 CPU - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. - CVE-2026-46917: partial denial of service via TLS bsc1272223. -...
CVE-2026-15704 CWE-863: ABAC authorization bypass via trailing slash route normalization in Eclipse BaSyx Go Components
In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled deployments are vulnerable to an authorization bypass caused by inconsistent trailing-slash handling between the ABAC middleware and the HTTP router. The shared router configuration used Chi's middleware.StripSlashes,...
CVE-2026-12654
CVE-2026-12654 affects Payment Plugins for Stripe WooCommerce (WordPress)
EUVD-2026-48452
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
EUVD-2026-48463
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.0.14 via the 'context' parameter due to missing validation on a user controlled key. This makes it possible for...
etcd: etcd: Authenticated user can bypass RBAC for unauthorized data access
A flaw was found in etcd, a distributed key-value store. An authenticated user, without sufficient read or lease-related permissions, could bypass Role-Based Access Control RBAC authorization checks. This bypass occurs during transaction operations involving PrevKv or lease attachment in Put...
CVE-2026-58275
Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-56191
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network...
CVE-2026-56165
Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute code over a network...
CVE-2026-49159
Exposure of sensitive information to an unauthorized actor in Microsoft Graph allows an authorized attacker to disclose information over a network...
EUVD-2026-48449
Pronetiqs IntraVUE versions 3.2.1a14 and prior have an exposure of sensitive system information to an unauthorized control sphere vulnerability which could expose the underlying host/share filesystem...