IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and...
CVE-2026-17485
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive information
#severity:high
共收录 5387 条相关情报。
← 返回所有主题Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)
CVE-2026-55074
Through version 1.3.0, the jailexec connection plugin's put_file resolved a transfer's destination to a path on the jail
rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers...
CVE-2026-64826
rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary file
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading...
CVE-2026-13433
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when c
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal...
CVE-2026-13105
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue...
CVE-2026-14866
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to
The MongoDB BI Connector ODBC Driver converts floating point column values into text without...
CVE-2026-18888
The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fi
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in...
CVE-2026-13367
IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI...
CVE-2026-19002
A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can resu
An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue...
CVE-2026-19004
An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output pa
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute...
CVE-2026-16695
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to imp
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During...
CVE-2026-13622
A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy. During live migration, virt-hand
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 IBM Informix could allow an unauthenticated...
CVE-2026-13476
IBM Informix Dynamic Server 14.10, 15.0, and 12.10 IBM Informix could allow an unauthenticated user to execute arbitrary
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution...
CVE-2026-13094
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when install
CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows...
CVE-2026-73330
CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to ex
CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low...
CVE-2026-73326
CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user to access a
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation...
CVE-2026-10543
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted
A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(),...
CVE-2026-73434
A flaw was found in GStreamer gst-plugins-good (avidemux). In gst_avi_demux_riff_parse_vprp(), the number of available g
CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated...
CVE-2026-73331
CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers with post cr
SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in...
CVE-2026-72809
SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in the kernel's CheckAuth f