7477 matches found
JetBrains TeamCity < 2019.1.5 Multiple Vulnerabilities
The version of JetBrains TeamCity installed on the remote host is prior to 2019.1.5. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages. CVE-2020-7908 - In JetBrains TeamCity before 2019.1.5, some...
Exploit for CVE-2026-19843
Patch: CVE-2026-19843 Vulnerability Details - CVE: CVE...
[SECURITY] [DSA 6454-1] sabnzbdplus security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6454-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 20, 2026 https://www.debian.org/security/faq -...
Debian dsa-6454 : sabnzbdplus - security update
The remote Debian 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6454 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6454-1 [email protected] https://www.debian.org/security/ Moritz...
CVE-2026-18372
CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users...
CVE-2026-18371
HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users...
CVE-2026-18372 CSS injection in M-Files Web
CSS injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated vault administrator to inject arbitrary CSS, affecting the web user interface displayed to other vault users...
CVE-2026-18372
M-Files Web before version 26.8.16330.2 is affected by a CSS injection vulnerability. An authenticated vault administrator can inject arbitrary CSS into the web user interface displayed to other vault users, resulting in low integrity impact on both the vulnerable and subsequent systems. The CVSS...
CVE-2026-18371 HTML injection in M-Files Web
HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users...
EUVD-2026-62369
HTML injection vulnerability in M-Files Web before 26.8.16330.2 allows an authenticated attacker to affect web user interface contents displayed to other users...
CVE-2026-18371
An authenticated attacker in M-Files Web before version 26.8.16330.2 can inject HTML to alter UI contents shown to other users, enabling potential phishing or content spoofing. CVSS 4.0 rates it MEDIUM (5.1) with low privileges required and passive user interaction. No exploitation evidence is re...
PT-2026-78326
Name of the Vulnerable Software and Affected Versions M-Files Web versions prior to 26.8.16330.2 Description An authenticated vault administrator can inject arbitrary CSS into the web user interface. This allows the administrator to modify the visual presentation of the interface as displayed to...
CVE-2026-70922
Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services Applications component: Web UI. Supported versions that are affected are 8.0.8.2 and 8.1.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...
EUVD-2026-61869
Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services Applications component: Web UI. Supported versions that are affected are 8.0.8.2 and 8.1.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...
CVE-2026-74978
Clickjacking issue in the Widget component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
PT-2026-77913
Name of the Vulnerable Software and Affected Versions Oracle Financial Services Enterprise Case Management version 8.0.8.2 Oracle Financial Services Enterprise Case Management version 8.1.2.11 Description A flaw in the Web UI component allows a low privileged attacker with network access via HTTP...
CVE-2026-70922: Improper Authentication
Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services Applications component: Web UI. Supported versions that are affected are 8.0.8.2 and 8.1.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTT...
CVE-2026-68518
Glances is an open-source system cross-platform monitoring tool. Prior to 4.5.6, sanitizemustachedict in glances/actions.py sanitizes individual Mustache values before chevron.render, allowing adjacent unescaped Mustache variables to reconstruct shell operators that securepopen executes when...
BIT-HARBOR-2026-4404 Use of hard coded credentials in GoHarbor Harbor
Use of hard coded credentials in GoHarbor Harbor version 2.15.0 and below, allows attackers to use the default password and gain access to the web UI...