IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session...
CVE-2026-14996
IBM Aspera Faspex 5 5.0.0 through 5.0.15.4 has addressed a vulnerability related to session management.
#severity:high
共收录 5411 条相关情报。
← 返回所有主题IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS...
CVE-2026-13442
IBM Langflow OSS 1.0.0 through 1.10.1 can allow an attacker to reuse another user's FAISS namespace to access owner-only
IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to...
CVE-2026-14974
IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0...
CVE-2026-7769
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.5_2, 6.2.1.0 through 6.2.1.1_2, and 6.2.2.0 through 6.2.2.0_1 and IBM
MikroTik RouterOS contains a weakness in its API authentication handling that lacks effective...
CVE-2026-16347
MikroTik RouterOS contains a weakness in its API authentication handling that lacks effective safeguards against excessi
Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session...
CVE-2026-66745
Artica Proxy before 4.50.000000 Service Pack 7 (fixed in hotfix 20260724-02) contains a session fixation vulnerability t
SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the...
CVE-2026-57510
SuperPlane before 0.27.0 contains a broken object-level authorization vulnerability in the CanvasService gRPC handlers t
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of...
CVE-2026-16192
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service vulnerability wh
A use-after-free condition exists in pglogical's worker signaling code, where a worker structure...
CVE-2026-50738
A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced aft
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass...
CVE-2026-16184
IBM WebSphere Application Server 9.0, and 8.5 could allow a remote attacker to bypass authentication by sending a crafte
Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path...
CVE-2026-48374
Bridge is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability th
Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code...
CVE-2026-48395
Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the contex
Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code...
CVE-2026-48391
Bridge is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the contex
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code...
CVE-2026-48394
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code...
CVE-2026-48393
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code...
CVE-2026-48392
Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context
Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary...
CVE-2026-48396
Bridge is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the cont
Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege...
CVE-2026-48390
Bridge is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker co
In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server...
CVE-2026-16771
In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on
The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all versions...
CVE-2026-15992
The WP Password Policy plugin for WordPress is vulnerable to Privilege Escalation in all versions up to and including 3.