379513 matches found
CVE-2026-44760
The CVE-2026-44760 entry concerns a Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP-based applications that use the Business Server Pages framework. The vulnerability arises from unsanitized input being reflected in the HTTP response, enabling an attacker to inject and execute...
CVE-2026-44759
CVE-2026-44759 affects SAP NetWeaver Enterprise Portal. An unauthenticated attacker can inject malicious scripts into a URL parameter, with scripts reflected in server responses and executed in the user’s browser when the crafted URL is visited. This leads to theft of session information, manipul...
CVE-2026-44753
CVE-2026-44753 affects SAP HANA Database (User Self Service) / Extended Application Services classic model. An unauthenticated attacker can send specially crafted requests to obtain distinguishable responses that enumerate valid user accounts and email addresses. Impact is described as low confid...
CVE-2026-44752
CVE-2026-44752 affects SAP NetWeaver Application Server Java (often noted with the Configuration Wizard). The vulnerability is a Cross-Site Scripting (XSS) issue where an unauthenticated attacker can inject malicious JavaScript through crafted URLs. When a victim loads such a URL, the script runs...
CVE-2026-44747
CVE-2026-44747 affects SAP NetWeaver Application Server ABAP. An authenticated attacker can exploit logical errors in memory management to trigger memory corruption, leading to unauthorized data access, modification, or system unavailability. Impact is described as high for confidentiality, integ...
CVE-2026-44745
Technical details are not publicly available in the provided documents. Monitor for updates on CVE-2026-44745 for potential details on affected versions, remediation, and impact.
CVE-2026-27690
CVE-2026-27690 describes an HTTP Request Smuggling vulnerability in SAP Approuter. An unauthenticated attacker can send specially crafted requests to trigger request–response desynchronization, potentially exposing user responses and causing service unavailability. The CVE’s impact is listed as h...
CVE-2026-0487
CVE-2026-0487 concerns SAProuter on Microsoft Windows, where an unauthenticated attacker can load DLLs from an untrusted location, enabling arbitrary code execution through DLL hijacking. The root cause is improper DLL loading behavior that can be hijacked to execute malicious code, impacting con...
CVE-2026-15620
The CVE-2026-15620 affects mosaxiv clawlet up to version 0.2.10, specifically the function tools.webFetch in tools/tool_web_fetch.go. The underlying issue enables server-side request forgery (SSRF) and can be exploited remotely. Public disclosure of the exploit is noted, and a related GitHub issu...
CVE-2026-52826
Kimai: In version 2.56.0, an authenticated user can tamper with billing-related rates across projects, customers, or activities due to missing parent-child binding in rate edit endpoints. The vulnerability affects GET/POST routes such as /en/admin/project/{id}/rate/{rate}, /en/admin/customer/{id}...
CVE-2026-52825
CVE-2026-52825 is addressed in the connected disclosures about Kimai: an authenticated improper authorization flaw in team-related APIs allows a Teamlead to expand their team’s scope by adding users or activities outside of their managed visibility. The backend endpoints POST /api/teams/{id}/memb...
CVE-2026-52824
This CVE entry corresponds to CVE-2026-52824 with no public technical details in the Initial document. The connected advisory (GHSA-JR9P-4H4J-6C58) documents a concrete issue affecting the official Kimai Docker image: it ships with APP_SECRET=change_this_to_something_unique, which is used as the ...
CVE-2026-52823
Kimai 2.56.0 has authenticated CSRF in timesheet state-changing endpoints. The GET routes for stopping/restarting timesheets are non‑read operations that reuse the user’s session, enabling a logged-in attacker to trigger unauthorized actions by convincing the victim to visit a malicious page. Aff...
CVE-2026-52822
CVE-2026-52822 is reserved, but connected advisories provide concrete details for Kimai 2.56.0: an authenticated authorization bypass in the timesheet restart and duplicate workflows allows a user who loses access to a project to still create new timesheets under that project. The root cause is i...
CVE-2026-52821
Technical details for CVE-2026-52821 are not publicly available in the provided documents. Monitor for updates as the entry is reserved/no details yet.
CVE-2026-15619
CVE-2026-15619 affects mosaxiv clawlet prior to 0.2.10. The vulnerable element is the web_fetch function in tools/tool_web_fetch.go of the IPv4 Handler. The issue arises from manipulating the url argument, enabling server-side request forgery (SSRF). The attack can be initiated remotely, and an e...
CVE-2026-36035
The CVE-2026-36035 entry concerns CAXPerts UniversalPlantViewer WebServices Server v2.7.6 where an incorrect access control in the /api/License/deactivateOffline endpoint allows authenticated attackers with low privileges to trigger a Denial of Service by removing the license from the webserver. ...
CVE-2026-62666
CVE-2026-62666 has a technical description in connected PT Security disclosure: a flaw in the low-level user manager could mint an API key bound to a super admin account, enabling a backdoor super admin. The CVE entry itself is reserved in initial paper, and no vendor/product/version details are ...
CVE-2026-51105
CVE-2026-51105 affects aMULE-Project’s aMule 2.3.3. The root cause is a Buffer Overflow in the OP_SERVERMESSAGE Handler, enabling a remote attacker over the network with no user interaction to cause a denial of service. The CVSS indicates Network access, low complexity, no privileges, and a High ...
CVE-2025-56363
The Matter SDK (connectedhomeip) has a null pointer dereference in ReadRevisionAttribute across multiple clusters (Channel, Account Login, TargetNavigator, etc.) due to missing validation of the delegate pointer. This affects versions prior to 1.4.0 and can be exploited by a remote unauthenticate...
CVE-2026-56158
Technical details for CVE-2026-56158 are not publicly available in the provided documents. Monitor for updates as information may be added later.
CVE-2026-69420
The connected PT-2026-58859 entry documents CVE-2026-69420 as a buffer overflow privilege escalation issue related to touch screen emissions. The CVE initial description is a reserved placeholder; the connected document provides the specific technical anomaly (buffer overflow) and its potential i...
CVE-2026-51808
OpenHTJ2K is affected by CVE-2026-51808, a buffer overflow in versions prior to 0.18.4 that can lead to arbitrary code execution. The issue arises in openhtj2k_decoder_impl::invoke, invoke_line_based, invoke_line_based_stream, and invoke_line_based_predecoded within source/core/interface/decoder....
CVE-2026-51807
OpenHTJ2K is affected by a Buffer Overflow vulnerability in versions prior to 0.18.5 due to a flaw in j2k_precinct_subband::parse_packet_header() within source/core/coding/coding_units.cpp. Exploitation could allow an attacker to execute arbitrary code. A fix exists in newer releases (e.g., 0.18....
CVE-2026-52101
The CVE-2026-52101 entry concerns the andreimarcu linux-server package (versions 1.0 through 2.3.8). The vulnerability is located in the uploadRemote function within upload.go, enabling a remote attacker to obtain sensitive information. The incident is categorized as a high-severity, network-expl...
CVE-2026-52100
CVE-2026-52100 impacts andreimarcu linux-server versions 1.0–2.3.8. The issue is a Cross Site Request Forgery that allows a remote attacker to execute arbitrary code via the uploadPutHandler function. Impact per sources indicates potential arbitrary code execution with high integrity impact; conf...
CVE-2026-36214
CVE-2026-36214 — osTicket Stored XSS affects osTicket versions 1.10–1.17.7 and 1.18.0–1.18.3 due to a vulnerable Bootstrap Tooltip (3.3.4) and insufficient HTML sanitization. The attack stores a malicious JS payload in a ticket attachment and executes it when an Agent/Admin views the ticket, enab...
CVE-2025-56361
Summary: A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3–1.4 within the Level Control cluster server tick logic (emberAfLevelControlClusterServerTickCallback). If a MoveToLevel command is followed by a conflicting write to the OperationMode attribute in the Pump...
CVE-2025-56365
Summary (CVE-2025-56365): A reachable assertion vulnerability exists in Matter SDK (connectedhomeip) before 1.4.0, in the interaction model command processing logic. If an InvokeCommandRequest targets a nonexistent endpoint and cluster (e.g., 0x34), CodegenDataModelProvider::Invoke lacks proper c...
CVE-2025-56364
The CVE-2025-56364 entry relates to the Matter SDK (connectedhomeip) before 1.4.0, where GetDestinationGroupId().Value() can be accessed without verifying existence, causing a crash (SIGABRT) and denial of service. Root cause: use of an uninitialized value; the affected component is the Matter SD...
CVE-2025-56362
The CVE-2025-56362 entry concerns the Matter SDK (connectedhomeip) before 1.4.2. Affected component: Level Control cluster’s periodic server tick logic. Attack scenario: issuing a MoveToLevel command and immediately writing OperationMode=2 in the Pump Configuration and Control cluster can trigger...
CVE-2026-62670
CVE-2026-62670 has technical detail in connected PT-2026-58869: a basic API user with zero permissions could perform full read, write, and delete actions on any content folder that did not have explicit permissions. The root cause inferred from the description is missing or ineffective permission...
CVE-2026-38450
CVE-2026-38450 — Aetopia DAM v1.0.0 has a remote code execution issue exploitable via the name and description parameters of the Add/Update Project function. The provided data lists a high-severity CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and notes a remote attacker with no privilege...
CVE-2026-62671
Summary: PT Security’s entry confirms CVE-2026-62671 involves a vulnerability where a single attacker-controlled link can quietly rotate a logged-in user’s 2FA secret, causing the user’s authenticator app to become out of sync. The connected PT-2026-58870 description links the CVE to an attack sc...
CVE-2026-52820
CVE-2026-52820 is linked to a GitHub advisory (GHSA-VRR2-G9GH-C3JC) for Kimai: Timesheet PATCH/POST endpoints. The vulnerability arises from a Symfony form/query-builder path that accepts a user-supplied project ID and constructs an OR-bypass in the project query. This allows an authenticated use...
CVE-2026-52819
The CVE entry CVE-2026-52819 is reserved, and connected documents provide concrete details for a Kimai-related issue: a teamlead authorization bypass in the listTimesheets endpoint. The vulnerability arises in GET /api/timesheets?user= (and users[]=), where a user granted view_other_timesheet can...
CVE-2026-49992
Technical details for CVE-2026-49992 are not publicly available in the provided documents. Monitor for updates from official advisories; no affected products, root cause, impact, or remediation are specified here.
CVE-2026-15618
CVE-2026-15618 affects mosaxiv clawlet up to 0.2.10. The flaw is in the function guardExecCommand in the file tools/tool_exec.go of the exec Safety Guard component. The manipulation causes a protection mechanism failure and can be exploited remotely; the exploit has been released publicly. The re...
CVE-2026-47677
Consolidated details from the connected advisory show a real vulnerability in FacturaScripts: an unauthenticated 2FA validation endpoint (Core/Controller/Login.php twoFactorValidationAction) accepts only fsNick and fsTwoFactorCode, with no password, no CSRF check, and no rate limiting. The TwoFac...
CVE-2026-15607
TanStack DB up to 0.6.8 contains a vulnerability in the Alias Path Handler’s select function (src/query/compiler/select.ts) that allows improperly controlled modification of object prototype attributes (prototype pollution). Impacted component: TanStack DB; vulnerability arises from the select fu...
CVE-2026-15605
The vulnerability CVE-2026-15605 affects wandb 0.25.2.dev1, specifically the ArtifactManifestEntry.download path in wandb/sdk/lib/hashutil.py under Artifact Integrity Validation. The issue is described as the use of a weak hash due to manipulating the ArtifactManifestEntry.download, with the atta...
CVE-2026-57856
Cockpit CMS exposes a path traversal in the Bucket file storage API (/system/buckets/api). The api() function sanitizes the bucket name with a regex that still allows ".." and "../" sequences, which are then interpolated into uploads://buckets/{bucket} and not blocked by Flysystem’s WhitespacePat...
CVE-2026-58489
HedgeDoc prior to v1.11.0 is vulnerable to a CSRF-like flaw in the GitHub Gist export callback. The OAuth2 state value was only checked for presence, not validated against the user session, allowing an attacker to craft a callback URL with their own valid GitHub OAuth code. When a logged-in victi...
CVE-2026-57855
Cockpit CMS is affected by a missing authorization vulnerability in the Bucket file storage API (/system/buckets/api). The api() method in modules/System/Controller/Buckets.php executes bucket commands (ls, upload, removefiles, rename, createfolder) without ACL or role checks, allowing any authen...
CVE-2026-58102
Summary of CVE-2026-58102 : Crypt::OpenSSL::X509 (Perl) versions before 2.1.3 are affected by a heap out-of-bounds read when processing long certificate extension OIDs in hv_exts. The vulnerability arises while building the extension hash through extensions(), extensions_by_long_name(), extension...
CVE-2026-58101
CVE-2026-58101 affects Crypt::OpenSSL::X509 before 2.1.3 for Perl. The issue arises when X509V3_EXT_d2i(ext) returns NULL if an extension fails to parse, yet basicC, ia5string, and auth_att dereference the result without a NULL check, and keyid_data dereferences akid->keyid even when the AKI s...
CVE-2026-58486
CVE-2026-58486: HedgeDoc prior to 1.11.0 is vulnerable to a YAML alias bomb in note frontmatter. HedgeDoc parses frontmatter with js-yaml.load (js-yaml v3) via @hedgedoc/meta-marked, resolving YAML anchors and potentially expanding a malicious payload into a huge object, consuming CPU on each req...
CVE-2026-38165
Technical details for CVE-2026-38165 are not publicly available in the provided documents. Monitor for updates.