Archive
14 September 2026
Vulnerabilities first published on this day (UTC), newest first.
782 results · Feed
-
Medium 6.3
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a STRPCCMD CL command.
-
Medium 6.3
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a malicious emulator macr…
-
Medium 6.3
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input in a session file.
-
Medium 6.0
IBM i is Affected By A Race Condition Vulnerability in SQL Query Engine []
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a time-of-check to time-of-use (TOCTOU) race condition.
-
Medium 5.4
The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control
IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 Standard Edition could allow a remote authenticated attacker to bypass se…
-
Low 3.3
IBM i is Affected By Multiple Vulnerabilities in PASE [, ]
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker could leverage this to terminate their own process.
-
Low 3.3
GPAC MP4Box dom_events.c gf_sg_dom_event_bubble stack-based overflow
A vulnerability has been found in GPAC 26.07.0. Affected is the function gf_sg_dom_event_bubble of the file src/scenegraph/dom_events.c of the component MP4Box. The manipulation leads to stack-based buffer overflow. The attack can only be performed from a loc…
-
Medium 5.2
IBM i is Affected By Multiple Vulnerabilities in PASE [, ]
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An authenticated attacker could leverage this to terminate their own process.
-
High 8.2
Missing authentication in Ecommerce Template checkout session endpoint allows unauthenticated disclosure of buyer PII
Missing Authentication for Critical Function (CWE-306) in the checkout session lookup handler (src/app/api/stripe/checkout_sessions/route.ts), exposed at GET /api/stripe/checkout_sessions, in MarcosCamara01 Ecommerce Template before commit 91e273c allows a re…
-
High 7.5
IBM Sterling File Gateway is Vulnerable to Improper Access Control
IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker to obtain sensitive information due to improper access control.
-
Medium 4.3
IBM Sterling Secure Proxy is vulnerable to multiple issues
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to view administrative user interface components due to client-side authorization bypass.
-
Medium 5.4
IBM Sterling Secure Proxy is vulnerable to multiple issues
IBM Sterling Secure Proxy 6.2.0.0 through 6.2.1.2 could allow a remote authenticated attacker to perform UI spoofing and phishing attacks due to improper neutralization of user-supplied HTML markup.
-
Medium 5.4
IBM Cognos Analytics versions 12.0.4 and 12.1.3 is affected by security vulnerabilities
IBM Cognos Analytics 12.1.0 through 12.1.3 FP1, and 12.0.4 through 12.0.4 FP2 allows a non-privileged user to edit their given name and surname to include malicious JavaScript code. When an administrator later accesses the user account management panel and vi…
-
Critical 9.3
Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execut…
-
High 8.7
Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenti…
-
Medium 5.5
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iO…
-
Medium 5.5
A permissions issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia …
-
High 7.5
A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10…
-
Medium 5.5
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia …
-
Medium 5.5
This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be …
-
Medium 5.2
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26…
-
Medium 4.3
This issue was addressed through improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, mac…
-
High 7.8
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27. An app may be…
-
High 7.5
A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macO…
-
Medium 5.5
A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 a…
-
Medium 4.7
A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, …
-
Medium 5.9
A race condition was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may …
-
Medium 4.4
A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be …
-
High 8.8
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, …
-
High 7.8
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 27 and iPadOS 27, …
-
Medium 5.5
A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27…
-
Medium 5.5
A path handling issue was addressed with improved validation. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden…
-
Medium 5.5
A permissions issue was addressed with improved validation. This issue is fixed in Xcode 27, macOS Golden Gate 27. An a…
-
Medium 5.5
A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 2…
-
High 7.8
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Taho…
-
Medium 5.5
An authorization issue was addressed with improved access control. This issue is fixed in macOS Golden Gate 27, macOS S…
-
Medium 5.5
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Se…
-
Medium 6.3
A race condition was addressed with improved state handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS…
-
High 7.5CVE-2026-84543 Public exploit
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27,…
-
High 7.5
An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS …