IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due...
CVE-2026-82892
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary commands due to improper neutraliza
#severity:high
共收录 5373 条相关情报。
← 返回所有主题IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions...
CVE-2026-84084
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to a cross-site requ
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load...
CVE-2026-81626
IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability in the Load Balancer Groups component.
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the...
CVE-2026-81669
IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerability in the create csr wildcard CLI comm
IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root...
CVE-2026-84083
IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation via the SUID-root nmap_wrapper binary on t
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-84070
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security...
CVE-2026-84076
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to bypass security restrictions due to imp
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute...
CVE-2026-82887
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary commands due to impro
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse...
CVE-2026-82896
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to traverse directories on the system due
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute...
CVE-2026-11725
IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to...
CVE-2026-11727
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service
IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted...
CVE-2026-17619
IBM Platform RTM is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which co
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain...
CVE-2026-11726
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to obtain sensitive information or c
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a...
CVE-2026-11716
IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or pote
Obot: Server-Side Request Forgery via remote MCP server URL
## Summary In affected versions, the URL of a remote MCP server is attacker-controlled at registration and is fetched s
Obot: OAuth Dynamic Client Registration Enables API Token Theft via Audience Confusion
## Summary In affected versions, an unauthenticated attacker could register an OAuth client with an arbitrary external
io.moquette:moquette-broker has a Missing Authorization issue
CVE-2026-85058
## Summary Moquette MQTT Broker fails to enforce ACL write permission checks when publishing Will (Last Will and Testam
Perses's unvalidated project parameter enables filesystem path traversal
CVE-2026-63445
### Impact When Perses is using the file system database, on the list endpoints, the project value is bound from the re
Perses's missing authorization in datasource proxy allows cross-scope secret disclosure
CVE-2026-63199
### Impact The datasource proxy authorizes the caller on the Datasource scope, then resolves and decrypts any Secret na
Perses's project query parameter authorization bypass exposes cross-project resources
CVE-2026-63458
### Impact _What kind of vulnerability is it?_ An authenticated user who is only a viewer on project team-a requests GE