CVE-database
126.505 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-12669 LOW · 3.1 IBM MQ could allow an authenticated attacker to trigger a minor out-of-bounds read when sending malformed compressed data, though the data is not disclosed and… Ibm
- CVE-2026-12665 HIGH · 8.1 IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with malformed distinguished names… Ibm
- CVE-2026-12660 LOW · 2.7 IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation. Ibm
- CVE-2026-12350 MEDIUM · 6.5 IBM MQ could allow an authenticated attacker to cause a denial of service by sending a specially crafted asynchronous consume request that crashes the queue… Ibm
- CVE-2026-12343 MEDIUM · 6.5 IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of RFH2 message header fields in queued publish/subscribe… Ibm
- CVE-2026-12155 MEDIUM · 6.5 IBM MQ could allow an authenticated attacker to cause a denial of service by sending specially crafted multicast status messages that trigger a NULL pointer… Ibm
- CVE-2026-12148 HIGH · 7.5 IBM MQ Operator could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to unrestricted Java deserialization in… Ibm
- CVE-2026-11831 MEDIUM · 5.4 IBM MQ could allow an authenticated attacker to cause a limited denial of service and obtain very limited information about process memory layout due to… Ibm
- CVE-2026-11829 MEDIUM · 6.5 IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests. Ibm
- CVE-2026-11828 MEDIUM · 5.9 IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client… Ibm
- CVE-2026-10743 HIGH · 8.8 IBM MQ could allow an authenticated attacker to cause a denial of service or corrupt memory due to improper validation of buffer sizes in MQOPEN… Ibm
- CVE-2026-10574 HIGH · 8.8 IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when… Ibm
- CVE-2026-10572 HIGH · 8.8 IBM MQ could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code due to a heap buffer overflow when… Ibm
- CVE-2025-7203 MEDIUM · 4.9 The Management Console and product files expose sensitive data, including remote log server credentials, truststore passwords, and keystore passwords, in plain text. This occurs because…
- CVE-2025-7043 MEDIUM · 5.4 The ForgeRock client fails to correctly validate refresh tokens. This allows a refresh token to be treated as a valid access token, enabling its use…
- CVE-2025-6623 MEDIUM · 4.3 The carbon console accepts user-supplied XML input without sufficiently encoding potentially executable content, allowing for the injection of malicious scripts. Successful exploitation allows a remote…
- CVE-2025-13591 MEDIUM · 5.3 The authentication endpoint of WSO2 Identity Server fails to provide a consistent system response when a username does not exist in the system, allowing attackers…
- CVE-2025-13173 MEDIUM · 6.5 Tokens associated with user sessions are not revoked when the corresponding user session is terminated, unless another SSO request is initiated. This occurs when the…
- CVE-2025-10149 HIGH · 8.2 The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and…
- CVE-2026-109433 MEDIUM · 6.5 Camunda 7.24.0 before 7.24.16 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp that allows authenticated attackers to bypass permission checks…
- CVE-2026-112214 MEDIUM · 6.5 A flaw was found in the GStreamer ASF demuxer in gst-plugins-ugly. When parsing a Simple Index object, an attacker-controlled entry count is used to size…
- CVE-2026-88900 HIGH · 8.8 Deserialization of Untrusted Data vulnerability in Apache Camel Camel-Jgroups component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. JGroupsEndpoint.createExchange(Message), which… Apache
- CVE-2026-85317 MEDIUM · 4.8 Use of Cache Containing Sensitive Information vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.… Apache
- CVE-2026-85316 MEDIUM · 4.8 Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.… Apache
- CVE-2026-85315 MEDIUM · 5.3 Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… Apache
- CVE-2026-85314 MEDIUM · 6.5 Improper Input Validation vulnerability in Apache Camel Mail component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. CVE-2026-46584 addressed mail… Apache
- CVE-2026-85313 MEDIUM · 4.3 Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.… Apache
- CVE-2026-85312 MEDIUM · 4.8 Improper Input Validation vulnerability in Apache Camel Core component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The saga processor… Apache
- CVE-2026-85296 MEDIUM · 6.5 Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… Apache
- CVE-2026-85260 MEDIUM · 5.5 Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… Apache
- CVE-2026-85257 MEDIUM · 5.3 Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… Apache
- CVE-2026-85254 MEDIUM · 6.5 Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.… Apache
- CVE-2026-85251 HIGH · 7.5 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0… Apache
- CVE-2026-85250 HIGH · 7.5 Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… Apache
- CVE-2026-85249 MEDIUM · 6.5 Improper Input Validation vulnerability in Apache Camel Tika component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Tika producer… Apache
- CVE-2026-85247 MEDIUM · 5.9 Improper Certificate Validation vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When SSL was… Apache
- CVE-2026-85246 MEDIUM · 5.3 Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Mina component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… Apache
- CVE-2026-85245 MEDIUM · 5.9 Exposure of Data Element to Wrong Session vulnerability in Apache Camel Thrift component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… Apache
- CVE-2026-85243 MEDIUM · 5.9 Improper Validation of Integrity Check Value vulnerability in Apache Camel Crypto PGP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… Apache
- CVE-2026-84181 MEDIUM · 5.9 Improper Authentication vulnerability in Apache Camel Shiro component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The Shiro security processor… Apache
- CVE-2026-84180 MEDIUM · 5.3 Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel Knative component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before… Apache
- CVE-2026-84176 MEDIUM · 6.5 Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Platform HTTP Vertx component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0… Apache
- CVE-2026-80344 HIGH · 8.2 Server-Side Request Forgery (SSRF) vulnerability in Apache Camel AS2 component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. In the… Apache
- CVE-2026-80343 HIGH · 8.2 Improper Handling of Case Sensitivity vulnerability in Apache Camel Netty HTTP component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1.… Apache
- CVE-2026-79986 HIGH · 7.4 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Azure Files component. This issue affects Apache Camel: from 4.0.0… Apache
- CVE-2026-79983 HIGH · 7.4 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP component. This issue affects Apache Camel: from 4.0.0 before… Apache
- CVE-2026-78162 CRITICAL · 9.8 Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. The camel-hazelcast component applies… Apache
- CVE-2026-79633 HIGH · 8.1 vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Missing authorization checks allowed authenticated users to perform actions on non-public content they were…
- CVE-2026-79624 CRITICAL · 9.8 Insufficient session expiration vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Insufficient session invalidation allowed revoked users to continue accessing known private…
- CVE-2026-79620 MEDIUM · 4.3 Exposure of sensitive information through data queries vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. An improper authorization check in the similar-question…