Archive
8 October 2026
Vulnerabilities first published on this day (UTC), newest first.
228 results · Clear filters · Feed
-
Medium 6.5
In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG UR…
-
Medium 5.4
In Stump through 0.1.10, the updateSmartList and deleteSmartList GraphQL mutations (crates/graphql/src/mutation/smart_l…
-
Medium 6.9
A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file…
-
Medium 5.4
An OS command injection vulnerability exists in the PAM (Pluggable Authentication Module) session cleanup routines duri…
-
Medium 5.9
An authentication logic and privilege escalation vulnerability exists in the account management interface of Brocade Fa…
-
Medium 6.8
Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data du…
-
Medium 5.4
An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9…
-
Medium 5.4
Rubygem-katello: katello: katello: katello flatpak remote repositories api cross-organization authorization bypass
A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier. An authenticated user with permission to view flatpak remotes in one organization may be ab…
-
Medium 4.3
Rubygem-katello: katello: katello: katello docker tags repositories api cross-organization authorization bypass
A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta tag. An authenticated user with permission to view products in one organization may be able to retrie…
-
Medium 6.8
containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bou…
-
Medium 5.7
An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage…
-
Medium 6.9
A logic vulnerability in Brocade Fabric OS versions before 10.0.1 web management framework allows an authenticated, low…
-
Medium 6.8
A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabr…
-
Medium 6.9
A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions be…
-
Medium 6.0
A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fab…
-
Medium 6.8
An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS …
-
Medium 4.0
The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain a…
-
Medium 5.1
An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The inter…
-
Medium 5.1
A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform relea…
-
Medium 6.9
An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versi…
-
Medium 6.9
A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions befo…
-
Medium 5.3
An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabr…
-
Medium 6.5
NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Imp…
-
Medium 5.9
Potential brute force vulnerability due to non-expiring SMS OTPs
The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). This allows unused OTPs to remain valid indefinitely, presenting an opportunity for malicious actors to conduct brute …
-
Medium 4.8
GnuTLS v3.8.13 does not reject a critical keyUsage extension when it cannot be processed, such as when extnValue is an …
-
Medium 6.5
libming through 0.4.8 contains a heap buffer overflow in r_readc() in src/blocks/fromswf.c. A crafted SWF file with a m…
-
Medium 5.9
GnuTLS v3.8.13 does not properly enforce name constraints, as demonstrated by a permitted subtree violation for "EE O=E…
-
Medium 6.5
GnuTLS v3.8.13 can perhaps unexpectedly trust a certificate on the basis of Common Name when Subject Alternative Name h…