Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control...
CVE-2026-45176
Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within high-privileged age
#severity:high
共收录 5509 条相关情报。
← 返回所有主题Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control...
CVE-2026-45175
Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent vali
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app...
CVE-2025-31272
The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4. An app may be able to bypass la
This issue was addressed with improved checks to prevent unauthorized actions. This issue is...
CVE-2025-24284
This issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in macOS Sequoia 15.4
MessagePack's LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input
CVE-2026-48109
### Impact A vulnerability exists in the optional LZ4 decompression path used by MessagePack compression modes `Lz4Bloc
GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection
CVE-2025-27511
## Summary Administrator can perform JNDI attack through specially crafted DB2 jdbc url leading to Remote Code Executio
Russh SSH message fields were decoded through allocation-first parsers before field-specific bounds
CVE-2026-48110
# SSH message fields were decoded through allocation-first parsers before field-specific bounds ### Summary Several `r
AWS Advanced Go Wrapper has Privilege Escalation in Aurora PostgreSQL instance
CVE-2026-11401
Aurora PostgreSQL is a fully managed relational database engine that's compatible with PostgreSQL. An issue in Aurora P
WsgiDAV encoded dot segments can escape filesystem share roots
CVE-2026-48099
### Impact WsgiDAV 4.3.3 can allow a WebDAV request path containing an encoded parent-directory segment to escape the co
DevGuard has improper authorization on public assets
CVE-2026-48089
### Impact On a DevGuard API instance with one or more **public assets**, any authenticated user — including users from
Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion
CVE-2026-48059
### Impact The HAProxy PROXY protocol v2 codec in netty leaks native or heap memory on every connection when a client se
A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user...
CVE-2026-3329
A remote unauthenticated attacker may be able to conduct credential-guessing attacks against user accounts in Sonatype N
KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute...
CVE-2026-48546
KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by expl
IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify...
CVE-2026-7787
IBM Langflow OSS 1.0.0 through 1.9.1 could allow an authenticated user to read or modify sensitive information by bypass
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified...
CVE-2026-7870
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a user to gain elevated privileges due to an unqualified library call. A malici
Arc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS
CVE-2026-48050
### Summary Arc registers Go's `net/http/pprof` handlers at `/debug/pprof/*` via `app.Use(pprof.New())` in `internal/ap
A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows...
CVE-2026-10847
A local privilege escalation vulnerability exists in Check Point Identity Agent Full for Windows OS. An authenticated lo
openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging...
CVE-2026-8406
openSIS Classic 9.3 contains an insecure direct object reference vulnerability in the messaging module. Any authenticate
@grpc/grpc-js: A malformed request can cause a server crash
CVE-2026-48068
### Impact An invalid incoming HTTP/2 stream initiation can cause a server process to crash. This affects all servers cr
@grpc/grpc-js: An incoming malformed compressed message can cause a client or server crash
CVE-2026-48069
### Impact An invalid incoming compressed message can cause a client or server process to crash. This affects all client