CVE-2026-94243 Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...

MGASA-2026-0436 Updated rest packages fix a security vulnerability

Weak random number generation in pkce implementation. CVE-2026-16615...

Updated rest packages fix a security vulnerability

Weak random number generation in pkce implementation. CVE-2026-16615...

EUVD-2025-210991

IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2026-73589: Weak Encoding for Password

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information...

CVE-2026-94243: Origin Validation Error

A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue...

PT-2026-97341

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.36 Description The software contains a weak encoding mechanism for passwords. A low privileged attacker with local access could exploit this issue to achieve information...

CVE-2025-36084

IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2025-36084

IBM Concert versions 1.0.0 through 3.0.0 are affected by multiple vulnerabilities involving the use of weaker than expected cryptographic algorithms . This weakness could allow an attacker to decrypt highly sensitive information . No specific exploit information or remediation details are provide...

CVE-2025-36084 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2025-36084 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2026-25264

Privilege escalation due to weak configuration during package extraction process...

CVE-2026-25265

Privilege escalation due to weak configuration while temporary file handling...

EUVD-2026-84348

Privilege escalation due to weak configuration while temporary file handling...

EUVD-2026-84347

Privilege escalation due to weak configuration during package extraction process...

CVE-2025-36084: Use of a Broken or Risky Cryptographic Algorithm

IBM Concert 1.0.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information...

CVE-2026-25264: Uncontrolled Search Path Element

Privilege escalation due to weak configuration during package extraction process...

Spring Boot: Spring Boot: Weak pseudo-random number generation can lead to information disclosure.

A flaw was found in Spring Boot. The $random.value property source utilizes a weak pseudo-random number generator PRNG, meaning the values it produces are not sufficiently random for use as cryptographic secrets. An attacker could potentially predict these values, which may lead to information...

CVE-2026-94107: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that generates recovery codes using substrmd5mtrand, 0, 10. Attackers who know an administrator's email address can request a password reset and predict the token to gain administrative...

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Overview Affected versions of this package are vulnerable to Use of Cryptographically Weak Pseudo-Random Number Generator PRNG via the users.passrecover.php process. An attacker can reset any account password, including administrators, by precomputing candidate tokens within a narrow time window...