IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause...
CVE-2026-82101
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due
#severity:critical
共收录 1449 条相关情报。
← 返回所有主题IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...
CVE-2026-82110
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain...
CVE-2026-82103
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive...
CVE-2026-96119
IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbi
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper...
CVE-2026-66086
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling informa
BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows...
CVE-2026-108860
BotSharp through 5.2.0 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to f
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host...
CVE-2026-108753
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml, which s
Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect...
CVE-2026-108707
Wukong_HRM through commit 186115e contains an authentication bypass vulnerability in ParamAspect that allows unauthentic
Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
CVE-2026-66563
Unauthenticated PHP Object Injection in Windsor <= 2.10 versions.
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0...
CVE-2026-81797
Unauthenticated PHP Object Injection in Buzz Stone | Magazine & Viral Blog WordPress Theme <= 1.0.2 versions.
Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.
CVE-2026-78529
Unauthenticated PHP Object Injection in Alliance <= 3.11 versions.
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of...
CVE-2026-108474
In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions
TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment
CVE-2026-108261
### Summary The TinaCMS admin builds its preview `` from the `/~/*` hash-router splat without checking that the value s
Contao: Cross-site scripting in the comments bundle
CVE-2026-107845
An unauthenticated front end visitor can post a comment containing a XSS injection. The victim is any back end user who
Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite
CVE-2026-107806
## Summary An authenticated nginx-ui user can call `POST /api/restore`, upload a forged encrypted backup, restore `app.
Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)
CVE-2026-68582
## Summary The task-collection endpoint `GET /api/v1/projects/{project}/views/{view}/tasks` loads the requested project
Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that...
CVE-2026-108157
Pingvin Share X from 0.19.0 before 1.22.0 contains an improper authentication vulnerability that allows remote unauthent
A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in...
CVE-2026-107908
A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows
A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src...
CVE-2026-7827
A stack-based buffer overflow in the _RdbLoadEntity function of the RDB graph decoders (src/serializers/decoders/*/decod
An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c)...
CVE-2026-107910
An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.