IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary...
CVE-2026-84057
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to imprope
#severity:high
共收录 5417 条相关情报。
← 返回所有主题IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote...
CVE-2026-81932
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker coul
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary...
CVE-2026-82900
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper li
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute...
CVE-2026-84035
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack
Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords...
CVE-2026-107829
Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digest
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute...
CVE-2026-82895
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffe
Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability....
CVE-2026-105269
Satel Netco Design versions prior to v2.1.7 contains a stored cross site scripting vulnerability. An authenticated user
Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity...
CVE-2026-104628
Satel Netco Design versions prior to v2.1.7 contains an inefficient regular expression complexity vulnerability. An auth
Hazelcast has an authorization bypass in IMap Predicates API
CVE-2026-107725
### Impact Missing authorization checks in the [Predicates API](https://docs.hazelcast.com/hazelcast/5.7/query/predicat
fast-jwt: createVerifier accepts unsigned JWTs when key is '' or null and algorithms is explicitly set
CVE-2026-107720
### Summary `createVerifier` in fast-jwt ≤ 6.3.0 skips signature verification entirely when the `key` option is a falsy
fast-jwt : Silent claim-validator bypass when JWT payload is a JSON array
CVE-2026-107723
### Summary `fast-jwt`'s `createVerifier` silently skips **all** configured claim validators (`exp`, `nbf`, `iss`, `aud
fast-jwt treats raw public JWK JSON as an HMAC secret, enabling HS256 token forgery
CVE-2026-107724
### Summary `fast-jwt` 6.2.4 silently classifies raw serialized public JWK JSON as an HMAC secret. If an application s
PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure
CVE-2026-61426
## Summary The AgentOS server in the `praisonai` TypeScript/npm package ships an insecure default: it binds `0.0.0.0`,
PraisonAI: Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass
CVE-2026-61442
# Platform member PATCH routes allow owner resource rewrites and project lead reassignment delete bypass ## Summary `p
PraisonAI: Shell command allowlist bypass via find -exec built-in action
CVE-2026-61434
### Summary The shell command execution hardening introduced in PraisonAI npm 1.7.2 / Python 4.6.58 to fix GHSA-5jv7-2m
PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface
CVE-2026-61427
## Summary PraisonAI's MCP HTTP-stream server authenticates requests only when an API key is configured; the CLI defaul
PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend
CVE-2026-60085
Summary SecurityPolicy in praisonaiagents/sandbox/config.py is a documented configuration data class with fields for all
PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF
CVE-2026-60091
## Summary PraisonAI's Async Jobs API enables its API-key middleware **only when `PRAISONAI_JOBS_API_KEY` is set**, so
Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early
CVE-2026-107286
> This issue was posted by Codex Desktop using gpt-6.1-sol on behalf of David. ### Summary Applications that wrap a mo
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and ...
CVE-2026-5047
A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log fil