IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9...
CVE-2026-4938
IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Ident
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message...
CVE-2026-4942
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message and downgrade the Tran
IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 (...
CVE-2026-14979
IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to...
CVE-2026-15093
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to redirect users to malicious websites due
IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an...
CVE-2026-15995
IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain inc
IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute...
CVE-2026-14501
IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain se
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary...
CVE-2026-15069
IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute arbitrary script code due to imp
PocketSphinx: Buffer overflows in language and acoustic model loading code
CVE-2026-54559
### Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary condition
AngleSharp HTML5 Spec Compliance: mXSS via annotation-xml HTML Integration Point Bypass
CVE-2026-54570
### Summary The HTML specification requires that a MathML `` element with `encoding="text/html"` or `encoding="applicati
PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs
Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs Repo
ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes
CVE-2026-53496
## Summary ExifReader 4.40.0 can throw an uncaught `RangeError: Offset is outside the bounds of the DataView` while par
mcp-memory-keeper: Arbitrary local file read in context_import via unvalidated filePath
CVE-2026-54561
### Impact `context_import` passed the caller-supplied `filePath` directly to `fs.readFileSync` with no path confinemen
Formie: Missing authorization in administrative settings allows low-privileged CP users to modify plugin configuration
Formie contains a missing authorization vulnerability in administrative settings routes. An authenticated, non-admin Cra
TAK-PS-Stats Web UI: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard
CVE-2026-54546
### Summary `PUT /api/basemap` (the basemap import endpoint) fetches an attacker-supplied URL server-side with **no SSR
plone.restapi: Stored XSS by spoofing mime type
### Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whene
plone.app.textfield: Stored XSS by spoofing mime type
CVE-2026-54503
### Impact A stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whene
Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the...
CVE-2026-63308
Helm through 4.2.3, fixed in commit ba6c9a2, contains a denial of service vulnerability in the Files.Lines template help
SurrealDB before 3.1.5 fail to apply field-level SELECT permissions to ORDER BY clauses, allowing...
CVE-2026-63309
SurrealDB before 3.1.5 fail to apply field-level SELECT permissions to ORDER BY clauses, allowing authenticated users to
A flaw was found in the authentication configuration endpoint of the keycloak-services component,...
CVE-2026-16104
A flaw was found in the authentication configuration endpoint of the keycloak-services component, which is the core engi
A flaw was found in the admin REST API of Keycloak, a solution for identity and access management...
CVE-2026-16106
A flaw was found in the admin REST API of Keycloak, a solution for identity and access management. The issue occurs when