146580 matches found
Exploit for Missing Authentication for Critical Function in Cpanel
CVE-2026-41940 — cPanel & WHM Authentication Bypass CVSS v3...
The vulnerability of the Dovecot mail server, related to the possibility of bypassing the authentication process, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Dovecot mail server relates to the possibility of bypassing the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Zabbix Agent 2 component of the Zabbix IT-infrastructure monitoring system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Zabbix Agent 2 component of the Zabbix IT infrastructure monitoring system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
The vulnerability of the Dovecot mail server, related to insufficient protection of service data, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Dovecot mail server is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module on the Django web application development platform allows a malicious actor to gain unauthorized access to protected information.
The vulnerability of the django.middleware.cache.UpdateCacheMiddleware module in the Django web application framework relates to the disclosure of information through caching. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
The vulnerability of the Glances monitoring tool lies in the lack of protection for service data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Glances monitoring tool is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Glances monitoring tool, related to insufficient validation of requests on the server side, allows a perpetrator to gain unauthorized access to protected information or perform an SSRF attack.
The vulnerability of the Glances monitoring tool is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information or perform an SSRF attack...
PT-2026-64083
A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the allow origin pat configuration is used. The issue arises from the use of re.match for validating the Origin header, which only anchors at the start of the string. This...
PT-2026-64021
Name of the Vulnerable Software and Affected Versions Logto affected versions not specified Description Logto performs principal lookup without normalizing email and identifier strings. This lack of normalization allows for principal collision, which can lead to unauthorized account access when...
PT-2026-63798
Name of the Vulnerable Software and Affected Versions odh-dashboard affected versions not specified Description A flaw in the odh-dashboard web console component of Red Hat OpenShift AI RHOAI involves incorrect network binding. This allows a malicious actor within the cluster to bypass...
CVE-2026-64812: Missing Authentication for Critical Function
In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session...
CVE-2026-16745: Origin Validation Error
A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI RHOAI. Due to incorrect network binding, a malicious actor within the cluster can bypass authentication and impersonate any user by providing an arbitrary access token. This allows an attacker to gain unauthorize...
CVE-2026-64876: Cross-Site Request Forgery (CSRF)
Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension - Database-update requests lacked consistent token and Super User checks, this could cause unauthorized updates...
PT-2026-63966
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.2 Description An issue exists where unauthorized input injection is possible during a Remote Development session. Recommendations Update JetBrains IntelliJ IDEA to version 2026.2...
PT-2026-63606
Database-update requests lacked consistent token and Super User checks, this could cause unauthorized updates...
ROS-20260723-73-0048
The vulnerability in Chromium is related to the use of an unauthorized intermediate policy file. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
PT-2026-63968
In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session...
PT-2026-63967
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.2 Description An issue exists in Remote Development sessions that allows for the unauthorized modification of settings. Recommendations Update JetBrains IntelliJ IDEA to version 2026.2...
PT-2026-63954
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in MultiVendorX WooCommerce Product Stock Alert allows Retrieve Embedded Sensitive Data. This issue affects WooCommerce Product Stock Alert: from n/a through 3.0.6...
ROS-20260723-73-0052
The vulnerability in Chromium is related to the use of an unauthorized intermediate policy file. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...