IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue...
CVE-2026-14866
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to
2026-08-13 归档
今日共收录 1881 条安全情报，包含 959 个 CVE，493 篇安全通告，以及 113 篇研究论文。
← 返回归档列表IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local...
CVE-2026-18096
IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial
The MongoDB BI Connector ODBC Driver converts floating point column values into text without...
CVE-2026-18888
The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fi
MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the...
CVE-2026-19503
MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpo
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in...
CVE-2026-13367
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root
Rejected reason: Voluntarily withdrawn
CVE-2026-62421
Rejected reason: Voluntarily withdrawn
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI...
CVE-2026-19002
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can resu
An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue...
CVE-2026-19004
An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output pa
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute...
CVE-2026-16695
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to imp
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization...
CVE-2026-16480
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the c
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During...
CVE-2026-13622
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-hand
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 IBM Informix could allow an unauthenticated...
CVE-2026-13476
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 IBM Informix could allow an unauthenticated user to execute arbitrary
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution...
CVE-2026-13094
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when install
CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows...
CVE-2026-73330
CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to ex
CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low...
CVE-2026-73326
CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user to access a
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation...
CVE-2026-10543
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted
A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(),...
CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available g
CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated...
CVE-2026-73331
CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers with post cr
A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an...
CVE-2026-73433
A flaw was found in GStreamer gst-plugins-good (avidemux). When parsing FUJIFILM metadata in an AVI strd chunk, gst_avi_
SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph and...
CVE-2026-72804
SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph and getLocalGraph endpoints, allowing a