405,382 results · Feed
-
Unscored —
When MicroProfile JWT role-based access control is used, the access constraints of JAX-RS resources are not always enfo…
-
Medium 6.3
Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to…
-
Unscored —
After a successful WS-Security UsernameToken authentication, the caller identity stays associated with the worker threa…
-
Unscored —
The embedded OpenEJB HTTP server does not isolate HTTP sessions between web applications. A remote attacker can use a s…
-
Unscored —
When resolving security roles of a realm-authenticated caller, the caller's user name is also treated as a role name in…
-
Critical 9.1
Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to…
-
High 7.7
Nango before 0.71.3 contains an sql injection vulnerability that allows unauthenticated attackers to execute arbitrary …
-
Critical 9.1CVE-2026-125757 Public exploit
mailcow: dockerized before 2026-11 Template Injection RCE via Domain-Wide Footer
mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in the shared rspamd container by storing a malicious domain-wide footer. Attackers can embed a Jinja macro with a…
-
High 8.3
Nodemailer 3.0.0 before 10.4.1 contains an address parsing flaw in addressparser that truncates domains at folding whit…
-
Medium 5.9
postal-mime before 4.2.1 Sender Spoofing via Address Parser Domain Truncation
postal-mime before 4.2.1 contains a parser differential vulnerability in its address parser that truncates the domain at folding whitespace or comments preceding a dot. Remote attackers can craft From headers that pass SPF/DKIM/DMARC alignment for their own s…
-
High 7.1
Dolibarr 20.0.0 through 23.0.4 and 24.x before 24.0.2 contains an insecure direct object reference vulnerability in api…
-
Unscored —
The Jakarta Security identity store backed by the Tomcat user database compares the supplied password with the stored v…
-
Medium 5.9CVE-2026-125753 Public exploit
ABP Framework before 10.6.2 and 10.7.0 Path Traversal via Blogging File Endpoints
ABP Framework 2.9.0 before 10.6.2 and 10.7.0 pre-releases before 10.7.0 contain a path traversal vulnerability in DefaultBlobFilePathCalculator that allows unauthenticated attackers to access files outside the blob container. Attackers can send %5C-encoded ba…
-
Low 2.3
Meteroid before 2.2.0 contains an authorization bypass vulnerability in the ApiTokensService GetApiTokenById gRPC handl…
-
Medium 5.0
Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatus
Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService UpdateCouponStatus gRPC handler, whose UPDATE query filters only on coupon id and ignores tenant ID. Authenticated users with catalog:manage or a tenant-sco…
-
High 7.1
Firekylin through 2.18.1 contains an improper authorization vulnerability that allows editor-role users to read adminis…
-
Medium 4.3
Parabol before 15.21.2 Missing Authorization via addReactjiToReactable Mutation
Parabol before 15.21.2 contains a missing authorization vulnerability in the addReactjiToReactable GraphQL mutation that allows authenticated users to tamper with reactions on other organizations' content. Attackers can pair their own meetingId with a reactab…
-
Medium 4.2
TaxHacker through 0.8.5 IDOR via Settings Server Actions userId
TaxHacker through 0.8.5 contains an insecure direct object reference vulnerability in app/(app)/settings/actions.ts that allows authenticated users to modify other users' data by supplying an arbitrary userId. Attackers can invoke Server Actions like deleteCa…
-
Medium 5.3
ZenTao PMS through 22.7 contains a missing object-level authorization vulnerability in module/build/control.php that al…
-
Unscored —
The development-time LiveReload support listens on all network interfaces without authentication and accepts websocket …
-
Unscored —
The embedded OpenEJB HTTP server reports every request as authenticated when an application requests authentication pro…
-
Unscored —
The admin service of the standalone OpenEJB server accepts stop requests without any authentication. Any local user or …
-
Unscored —
When JAX-WS or JAX-RS endpoints are published by the embedded OpenEJB HTTP server rather than Tomcat, some configured a…
-
Unscored —
With the default configuration and no users defined in the default user database, TomEE silently adds an administrative…
-
Unscored —
The optional request routing feature forwards requests to their configured destination without applying the security co…
-
Unscored —
The embedded server generates HTTP session identifiers with a non-cryptographic random number generator by default. A r…
-
Unscored —
The Jakarta Security OpenID Connect authentication mechanism generates the state and nonce values with a non-cryptograp…
-
Unscored —
The Jakarta Security LDAP identity store accepts an empty password as valid if the directory server allows unauthentica…
-
Medium 5.7
Docker Desktop before version 4.94.0 could write the signed-in user's Docker Hub access token (a JWT) in cleartext to a…
-
High 7.7
In Eclipse Kura versions 5.0.0 through 5.6.2, the Wire Graph update functionality of the Kura Web UI, and the Wire Serv…
-
Medium 6.5
Podman: untrusted image labels allow auto-update to restart arbitrary systemd units
A flaw was found in Podman. An attacker can trigger a Denial of Service (DoS) by supplying a container image containing crafted metadata labels. Podman's auto-update mechanism improperly trusts these image labels to determine which system services to restart.…
-
High 7.0
Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data it receive…
-
High 7.5
A flaw was found in flightctl. A TLS handshake is performed synchronously in the HTTP server’s connection-context callb…
-
High 8.8
Use-after-free in the Audio/Video component
Use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox ESR 115.45.
-
Unscored —
Same-origin policy bypass in the CSS Parsing and Computation component
Same-origin policy bypass in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
-
High 8.8
Incorrect boundary conditions in the Graphics component
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
-
Unscored —
Other issue in the SVG component
Other issue in the SVG component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
-
Unscored —
Invalid pointer in the Layout: Text and Fonts component
Invalid pointer in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
-
Unscored —
Invalid pointer in the JavaScript Engine: JIT component
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.
-
High 8.8
Use-after-free in the Layout component
Use-after-free in the Layout component. This vulnerability was fixed in Firefox 160 and Thunderbird 160.