94256 matches found
Vulnerability related to trust management issues in HCL AppScan integration with Azure Boards for ASoC & A360
The HCL AppScan integration with Azure Boards for ASoC and A360 version 1.0.0 contains a trust management vulnerability. This vulnerability arises because sensitive information can be accessed in plaintext during pipeline execution. Even though it is masked in the user interface, it may still be...
CVE-2026-114490 Incorrect Authorization in hMailServer
Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains - a credential an administrator may create meaning to confine it to those domains - to act as the whole-server...
CVE-2026-114490
Progressive Robot hMailServer versions 6.3.4 through 6.3.6 contain an incorrect authorization vulnerability in the COM administration API . The root cause is that the COM API's server-administrator check fails to respect domain restrictions for accounts with the serveradmin role, treating them as...
EUVD-2026-107329
Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains - a credential an administrator may create meaning to confine it to those domains - to act as the whole-server...
CVE-2026-114490 Incorrect Authorization in hMailServer
Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains - a credential an administrator may create meaning to confine it to those domains - to act as the whole-server...
CVE-2026-114490 Incorrect Authorization in hMailServer
Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an account assigned the serveradmin role with a list of domains - a credential an administrator may create meaning to confine it to those domains - to act as the whole-server...
CVE-2026-114489 Missing Authorization in hMailServer
Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to change mail routing and domain configuration beyond those domains on a multi-tenant server. A doma...
EUVD-2026-107328
Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to change mail routing and domain configuration beyond those domains on a multi-tenant server. A doma...
CVE-2026-114489 Missing Authorization in hMailServer
Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to change mail routing and domain configuration beyond those domains on a multi-tenant server. A doma...
CVE-2026-114489 Missing Authorization in hMailServer
Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote authenticated user whose credential is confined to named domains to change mail routing and domain configuration beyond those domains on a multi-tenant server. A doma...
CVE-2026-114489
Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are vulnerable to missing authorization in the REST and COM administration APIs . This flaw allows a remote authenticated user with credentials confined to named domains to modify mail routing and domain configurations outside their scope...
[SECURITY] [DSA 6575-1] nginx security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6575-1 [email protected] https://www.debian.org/security/ Jan MojžÃÅ¡ October 21, 2026 https://www.debian.org/security/faq -...
CVE-2026-114478 Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer
Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write, naming in its From an address at a domain the server hosts, delivered to other receivers as passing that domain...
EUVD-2026-107321
Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write, naming in its From an address at a domain the server hosts, delivered to other receivers as passing that domain...
CVE-2026-114478
Progressive Robot hMailServer versions 6.0.0 through 6.3.6 are vulnerable to an unintended proxy or intermediary flaw (CWE-441 ). Due to insufficient preservation of the original sender during forwarding, an unauthenticated remote attacker can cause the server to deliver mail that appears to pass...
CVE-2026-114478 Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer
Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write, naming in its From an address at a domain the server hosts, delivered to other receivers as passing that domain...
CVE-2026-114478 Unintended Proxy or Intermediary ('Confused Deputy') in hMailServer
Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote unauthenticated attacker to have mail they write, naming in its From an address at a domain the server hosts, delivered to other receivers as passing that domain...
Security Bulletin: IBM SPSS Modeler is affected by vulnerabilities in Bouncy Castle for Java
Summary IBM SPSS Modeler is affected by vulnerabilities in Bouncy Castle for Java. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-17508 DESCRIPTION: In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-8384 DESCRIPTION: In Eclipse Jetty, an HTTP URI of this form: /public;/../admin/secret.txt results in an unresolved path of: /public/../admin/secret.txt instead of the...
