IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to...
CVE-2026-18193
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of
#severity:high
共收录 5387 条相关情报。
← 返回所有主题IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to...
CVE-2026-17099
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authenticatio
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a...
CVE-2026-17272
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain...
CVE-2026-17101
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due
Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana...
CVE-2026-72677
Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path T
Missing Authorization (CWE-862) in Kibana can lead to cross-space information disclosure and...
CVE-2026-72675
Missing Authorization (CWE-862) in Kibana can lead to cross-space information disclosure and unauthorized data modificat
The Elastic Security capability that suggests existing field values while a user authors endpoint...
CVE-2026-72672
The Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts queri
A lower privileged user who holds only the privilege to read agent policies can read the entire...
CVE-2026-72670
A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a confi
Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site...
CVE-2026-72658
Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62
Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Osquery and...
CVE-2026-72665
Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Osquery and Elastic Defend response acti
The state that Kibana stores for an Observability Onboarding flow is not bound to the user who...
CVE-2026-72669
The state that Kibana stores for an Observability Onboarding flow is not bound to the user who created the flow, and the
Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS
CVE-2026-73654
## Summary The run-metadata update endpoint `PUT /api/v1/runs/:runId/metadata` applies client-supplied "operations" by
nltk: Arbitrary File Read via Path Traversal in nltk.data.load() through Percent-Encoded Sequences
CVE-2026-12243
# Summary nltk.data.load() and nltk.data.find() resolve user-supplied resource names to filesystem paths using url2pathn
atomic-agents-stack: Dashboard HTTP server path traversal allows arbitrary file read
The optional dashboard HTTP server (`atomic_agents/dashboard/serve.py`) builds filesystem paths directly from the reques
Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892)
CVE-2026-54526
### Summary The allow-list fix for CVE-2026-31892 (GHSA-3wf5-g532-rcrr), and its follow-up coverage of `hostNetwork`/`s
Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name
CVE-2026-55072
### Summary A missing end anchor (`$`) in the ClassDefinition UID validation regex allows an authenticated user with the
A flaw was found in the `search-v2-operator` component. A user with specific administrative...
CVE-2026-71473
A flaw was found in the `search-v2-operator` component. A user with specific administrative permissions on a managed clu
A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending...
CVE-2026-71469
A flaw was found in search-v2-api. An unauthenticated attacker can exploit this by sending requests with unique random b
A data source definition containing an over-length file path setting may cause the MongoDB BI...
CVE-2026-19003
A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setu
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the...
CVE-2026-10534
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.