149869 matches found
CVE-2026-44084 Access Code Forgery in Video Station leading to unauthorized media access
An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later...
EUVD-2026-101973
A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.8 and later...
CVE-2026-26245
A SQL injection vulnerability (CWE-89) exists in the Video Station application within the class_videos.php file's getSmartVideosByOffset function. If a remote attacker obtains a valid user account, they can exploit this flaw to execute unauthorized code or commands . The vulnerability is addresse...
CVE-2026-26244
A SQL injection vulnerability exists in the Video Station application, specifically within the class_videos.php _getFilters component. If a remote attacker obtains a valid user account, they can exploit this flaw to execute unauthorized code or commands. The vulnerability has been addressed in Vi...
mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()
A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...
CVE-2023-29923-Scan
CVE-2023-29923-Scan PowerJob =4.3.2 Unauthorized Access Vulnerability Detection Tool CVE-2023-29922...
CVE-2026-107350
A flaw was found in PgBouncer. An improper authentication vulnerability allows a remote attacker possessing valid credentials for any listed user to impersonate any other user configured with Salted Challenge Response Authentication Mechanism SCRAM, including PgBouncer administrators and backend...
idm:DL1 security, bug fix, and enhancement update
An update is available for opendnssec, module.ipa, module.softhsm, module.python-qrcode, module.ipa-healthcheck, module.slapi-nis, python-kdcproxy, module.python-kdcproxy, custodia, softhsm, module.opendnssec, bind-dyndb-ldap, module.pyusb, python-qrcode, python-yubico, ipa-healthcheck,...
RLSA-2026:83460 Critical: idm:DL1 security, bug fix, and enhancement update
Rocky Enterprise Software Foundation Identity Management IdM is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fixes: ipa: FreeIPA: Unauthenticated DoS in /ipa/i18nmessages via Unbounded Request...
[SECURITY] [DLA 4835-1] mariadb security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4835-1 [email protected] https://www.debian.org/lts/security/ Otto Kekäläinen October 14, 2026 https://wiki.debian.org/LTS -...
CVE-2026-110838
A flaw was found in FreeRDP. A remote, unauthenticated attacker can exploit this issue by connecting to the shadow server and transmitting input data before authentication is completed. This allows the attacker to inject synthetic keystrokes directly into the host user's active session, potential...
DEBIAN-CVE-2026-93483
In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including...
CVE-2026-110911
Wheels 1.1.8 through 4.1.1 allows SQL injection when caller-supplied quoted values are parsed again as SQL by dynamic finders such as findOneByEmail, the query builder's whereproperty, value and whereproperty, operator, value, string/UUID-key lookup paths findByKey, updateByKey, deleteByKey and...
freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied...
Critical: Red Hat Security Advisory: idm:DL1 security, bug fix, and enhancement update
An update for the idm:DL1 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
freeipa: ipa: FreeIPA: trust-fetch-domains uses trust-read ACI to gate a privileged AD trust refresh, allowing unauthorized LDAP writes
A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied...
Critical: Red Hat Security Advisory: idm:DL1 security, bug fix, and enhancement update
An update for the idm:DL1 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability...
CVE-2020-1938
Disclaimer: All use of cybersecurity tools must comply with national laws, industry regulations, and the relevant rules of the target system, and must not be used for any illegal purposes or to infringe upon the lawful rights of others. Users should recognize that no tool can guarantee absolute...
CVE-2026-93483
In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including...
EUVD-2026-101820
In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific HTTP request header. Because the application incorrectly trusts this header, an attacker can impersonate any user, including...