IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions...
CVE-2026-84075
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentic
#severity:critical
共收录 1449 条相关情报。
← 返回所有主题IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and...
CVE-2026-82340
IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure deserialization and attacker-controlled refl
IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection...
CVE-2026-80442
IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command injection vulnerability in the exportCert
IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the...
CVE-2026-84078
IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vulnerability in the LoadBalancerServlet. An
IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute...
CVE-2026-81657
IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker to execute arbitrary code on the system
IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection...
CVE-2026-80441
IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-order SQL injection vulnerability in the ge
IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an...
CVE-2026-82967
IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that allows an unauthenticated remote attack
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-82832
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands...
CVE-2026-84082
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutra
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-84073
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to i
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-84031
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a...
CVE-2026-75878
IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated sessio
Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass
CVE-2026-59163
### Summary The Mnemosyne sync server's authentication check decoded JWT bearer tokens but never verified their HMAC-SH
AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing
CVE-2026-63374
### Impact Services using internationalized (non-ASCII) domain names are potentially vulnerable to TLS connections made
kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace
CVE-2026-61682
# Summary The kcp front-proxy fails to strip client-supplied identity headers before forwarding requests to shards. Any
LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py
CVE-2025-66455
## Summary LMDeploy's PyTorch DistServe/PD-disaggregation control plane used `recv_pyobj()` to deserialize messages rec
The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated...
CVE-2026-93467
The OAKlouds developed by HGiga has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execu
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate...
CVE-2026-69843
Authentication bypass by spoofing in Microsoft Fabric allows an unauthorized attacker to elevate privileges over a netwo
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker...
CVE-2026-62874
Insufficient verification of data authenticity in Azure Billing allows an unauthorized attacker to elevate privileges ov
Improper neutralization of special elements in output used by a downstream component ('injection'...
CVE-2026-87701
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB al