CVE-database
126.581 CVEs in database. Zoek op product (bv. fortinet, exchange) of CVE-ID.
- CVE-2026-87688 MEDIUM · 6.8 An input validation vulnerability exists in the security certificate management component of the Brocade Fabric OS administrative management API. When processing certificate management operations, user-supplied… Broadcom
- CVE-2026-87687 HIGH · 7.3 An authorization and input validation vulnerability exists in Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with restricted privileges in… Broadcom
- CVE-2026-87685 MEDIUM · 6.8 An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration… Broadcom
- CVE-2026-87675 MEDIUM · 6.8 An OS command injection vulnerability exists in the configuration management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When performing a… Broadcom
- CVE-2026-87674 HIGH · 7.8 A local privilege escalation vulnerability exists in the system logging daemon of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. Insufficient access controls… Broadcom
- CVE-2026-87673 HIGH · 7.2 An OS command injection vulnerability exists in maintenance command-line diagnostic utilities on Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. The binary fails… Broadcom
- CVE-2026-87667 MEDIUM · 4.5 An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration… Broadcom
- CVE-2026-87666 HIGH · 8.0 An OS command injection vulnerability exists in the time and zone management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When… Broadcom
- CVE-2026-87660 HIGH · 7.1 An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through… Broadcom
- CVE-2026-107448 LOW · 3.4 Magic: The Gathering Arena (Windows/Steam client; 2026.59.30.12801.127931.6 and certain later 2026.60.x builds) passes a server-supplied URL from a home-screen carousel GoToExternalUrl action directly to the…
- CVE-2026-107446 MEDIUM · 6.8 containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted overlaybd blob from…
- CVE-2026-107445 MEDIUM · 5.4 A flaw was found in Katello where the Flatpak Remote Repositories API does not properly enforce authorization when accessing a flatpak remote repository by identifier.…
- CVE-2026-107444 MEDIUM · 4.3 A flaw was found in Katello where the Docker Tags repositories API does not properly enforce organization scoping when listing repositories for a Docker meta…
- CVE-2026-94583 LOW · 2.6 A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1. When handling concurrent… Broadcom
- CVE-2026-94582 HIGH · 7.8 A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First (FSPF) protocol component of… Broadcom
- CVE-2026-94578 HIGH · 8.8 Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework allows remote authenticated users to… Broadcom
- CVE-2026-92862 LOW · 3.3 The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website via a crafted…
- CVE-2026-92861 MEDIUM · 4.0 The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application.
- CVE-2026-87686 MEDIUM · 4.3 An authentication and access control bypass vulnerability exists in the web server management interface of Brocade Fabric OS versions before 10.0.1. The web dispatcher routine… Broadcom
- CVE-2026-87684 CRITICAL · 9.8 A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an… Broadcom
- CVE-2026-87678 MEDIUM · 5.2 An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1. When configuring Federated Authentication (FA),… Broadcom
- CVE-2026-87676 MEDIUM · 5.7 A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for… Broadcom
- CVE-2026-87672 MEDIUM · 5.5 An information disclosure vulnerability exists in the SupportLink diagnostic collection utilities of Brocade Fabric OS versions before 10.0.1. When SupportLink is configured to use an… Broadcom
- CVE-2026-87671 HIGH · 7.5 An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query… Broadcom
- CVE-2026-87670 MEDIUM · 4.3 An authorization logic vulnerability exists in the Brocade Fabric OS versions before 10.0.1 REST API gateway. The internal gate guarding restricted management endpoints relies exclusively… Broadcom
- CVE-2026-87669 MEDIUM · 4.3 A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their… Broadcom
- CVE-2026-87668 MEDIUM · 6.5 A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations,… Broadcom
- CVE-2026-87665 HIGH · 7.5 A stack-based buffer overflow vulnerability exists in the Internet Key Exchange (IKEv2) protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when… Broadcom
- CVE-2026-87659 CRITICAL · 9.8 A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fabric… Broadcom
- CVE-2017-20283 MEDIUM · 6.5 NXP MQX Classic before 5.0 contains an out-of-bounds write vulnerability in the RTCS UDP recvfrom() implementation. Improper enforcement of the application-supplied receive buffer length may…
- CVE-2026-87726 LOW · 3.9 Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access…
- CVE-2026-87683 HIGH · 8.8 Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads… Broadcom
- CVE-2026-87682 HIGH · 8.8 Multiple OS Command Injection vulnerabilities exist in the management interface and session processing routines of Brocade Fabric OS versions before 10.0.1. Input processing flaws during… Broadcom
- CVE-2026-82627 HIGH · 7.5 The Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included plugin for WordPress is vulnerable to…
- CVE-2026-102488 NONE In de betreffende versies evalueert Octopus Server ten onrechte meerdere scoped-machtigingstoewijzingen, waardoor een zeer bevoorrechte gebruiker implementatietoestemmingen kan verkrijgen die verder gaan dan die welke…
- CVE-2026-87681 MEDIUM · 6.3 An Access Control Bypass vulnerability exists in the Role-Based Access Control (RBAC) validation engine of Brocade Fabric OS versions before 10.0.1. When processing certain management… Broadcom
- CVE-2026-87680 HIGH · 8.8 A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system… Broadcom
- CVE-2026-87679 HIGH · 7.2 When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary… Broadcom
- CVE-2024-8122 MEDIUM · 5.9 The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time Passwords (OTPs) used in multi-factor authentication (MFA). This allows unused OTPs…
- CVE-2026-94154 MEDIUM · 6.1 De Aurora Heatmap-plug-in voor WordPress is kwetsbaar voor Stored Cross-Site Scripting via de ‘url’ -parameter in alle versies tot en met 1.7.2 vanwege onvoldoende ontsmetting…
- CVE-2026-17538 MEDIUM · 5.4 De LatePoint - Appointment Booking & Reservation plugin voor WordPress is kwetsbaar voor Insecure Direct Object Reference in versies tot en met 5.6.9. Dit komt…
- CVE-2026-107315 MEDIUM · 5.3 pgjdbc, het PostgreSQL JDBC-stuurprogramma, versies 42.7.4 tot en met 42.7.13 pads een waarde die korter is dan de opgegeven lengte met nog bytes in de…
- CVE-2021-3199 CRITICAL · 9.5 ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. sequence in an image upload parameter and could… Onlyoffice
- CVE-2023-22894 CRITICAL · 9.5 Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via… Strapi
- CVE-2016-3081 CRITICAL · 9.5 Apache Struts contains a command injection vulnerability that could allow remote attackers to execute arbitrary code via method:prefix when Dynamic Method Invocation is enabled. Apache
- CVE-2015-5477 CRITICAL · 9.5 ISC BIND contains a data processing errors vulnerability that could allow remote attackers to cause a denial of service via TKEY queries. Required action: Apply… Isc
- CVE-2015-3306 CRITICAL · 9.5 ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site… Proftpd
- CVE-2026-97664 NONE Reden van afwijzing: deze CVE-ID is afgewezen of ingetrokken door de CVE-nummeringsinstantie.
- CVE-2026-89322 HIGH · 7.2 Vault en Vault Enterprise hebben het ACL-beleid niet consequent geëvalueerd ten opzichte van de canonieke vorm van resource- en beleidsnamen. Hierdoor kan een geverifieerde gebruiker…
- CVE-2026-107314 MEDIUM · 5.9 pgjdbc, het PostgreSQL JDBC-stuurprogramma, versies 42.7.11 tot en met 42.7.13 leggen geen beperking op wanneer de eigenschap requireAuth-verbinding alle zes verificatiemethoden uitsluit die het stuurprogramma…