145 matches found
CVE-2026-19290
IBM Sterling File Gateway is affected by an improper access control flaw (CWE-284) that allows a remote, unauthenticated attacker to obtain sensitive information over the network. The vulnerability impacts versions 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 through 6.2.1.2, and 6.2.2.0 through 6.2.2.1 , ...
PT-2026-91728
Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.6 1 IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.2 IBM Sterling File Gateway versions 6.2.2.0 through 6.2.2.1 Description Improper access control allows a remote attacker to...
WordPress Service Finder Booking plugin <= 6.2 - Privilege Escalation vulnerability
Privilege Escalation vulnerability discovered by Jamaal ahmed in WordPress Plugin Service Finder Booking versions = 6.2...
Spring Framework Server-Side Request Forgery via UriComponentsBuilder
Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery SSRF attack. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18...
EUVD-2026-35340
A vulnerability in Spring Expression Language SpEL evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker to invoke unintended application logic. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2....
EUVD-2026-35338
Applications that evaluate user-supplied Spring Expression Language SpEL expressions are vulnerable to an Algorithmic Denial of Service DoS. By providing a specially crafted expression, an attacker can trigger excessive resource consumption during evaluation, leading to application degradation or...
Fortinet FortiADC 信息泄露漏洞
Fortinet FortiADC is an application delivery controller from Fortinet, Inc. An information disclosure vulnerability exists in Fortinet FortiADC, which stems from the exposure of sensitive information and could lead to obtaining passwords for external resources. The following versions are affected...
CVE-2025-3450
An Improper Resource Locking vulnerability in the SDM component of B&R Automation Runtime versions before 6.3 and before Q4.93 may allow an unauthenticated network-based attacker to delete data causing denial of service conditions...
EUVD-2019-19211
Malware in sbrugna...
EUVD-2020-15575
Malware in sbrugna...
EUVD-2020-7821
Malware in sbrugna...
EUVD-2019-6811
Malware in sbrugna...
EUVD-2024-23213
Malicious code in bioql PyPI...
EUVD-2024-23214
Malicious code in bioql PyPI...
EUVD-2023-57637
Malicious code in bioql PyPI...
EUVD-2024-23215
Malicious code in bioql PyPI...
EUVD-2023-32291
Malicious code in bioql PyPI...
EUVD-2022-49642
Malicious code in bioql PyPI...
Graylog 授权问题漏洞
Graylog is a centralized log management solution from Graylog, Inc. in the United States. The product supports capturing, storing, and analyzing logs in real time, among other things. An authorization issue vulnerability exists in Graylog versions prior to 6.2.0 to 6.2.4 and 6.3.0-alpha.1 to...
Security advisory: Recently reported incomplete cleanup issue in Qt's Schannel handling can impact Qt
There is a "Incomplete Cleanup" problem in Qt’s Schannel handling when it is used to provide a server handling incoming TLS connections. This has been assigned the CVE id CVE-2025-6338. Affected versions: This issue affects only the Schannel functionality on Windows if it is turned on in Qt 5.15...