2026

A vulnerability in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to

A local privilege escalation vulnerability in HPE Networking Fabric Composer could allow an authenticated privileged use

A vulnerability exists in the API of HPE Networking Fabric Composer that allows for an attacker with administrative priv

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low pr

An unauthenticated path traversal vulnerability exists in the API endpoint of HPE Networking Fabric Composer. Successful

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated r

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated r

Authentication bypasses in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low pr

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated r

A privilege escalation vulnerability exists in the API of HPE Networking Fabric Composer. Successful exploitation could

A vulnerability in the underlying operating system of HPE Networking Fabric Composer could allow an authenticated low pr

Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Composer that could allow an authenticated l

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to

A vulnerability has been identified in the underlying operating system of HPE Networking Fabric Composer that could pote

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive A

Execution with Unnecessary Privileges (CWE-250) in the Kibana machine learning feature can lead to information disclosur

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive A

Uncaught Exception (CWE-248) in Kibana can lead to a denial of service via Input Data Manipulation (CAPEC-153). An authe

Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized modification of data via Accessing Functionality No

Incorrect Authorization (CWE-863) in Kibana Entity Analytics can lead to a loss of security monitoring via Accessing Fun

Improper Handling of Highly Compressed Data (CWE-409) in Kibana can lead to a denial of service via Excessive Allocation

Improper Neutralization of Special Elements in Data Query Logic (CWE-943) in Kibana can lead to information disclosure v

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Exce

Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive A

Filament is a collection of full-stack components for accelerated Laravel development. From 4.0.0 until 4.12.6 and 5.7.6

A flaw was found in the MTP backend in gvfs. When reading a file from a mounted MTP device, do_read() in gvfsbackendmtp.

A flaw was found in the AFP backend in gvfs. When mounting a share, a malicious AFP server can cause the DSI read path t

A flaw was found in the SFTP backend in gvfs. When mounting a share, a malicious SFTP server can cause read_string() to

A flaw was found in pulpcore's content serving application. Files uploaded to Pulp file-type repositories are served wit

Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSocket Trigger nodes, allowing authenticat

Snipe-IT before 8.7.0 gates the bulk asset restore endpoint on the assets.edit permission instead of assets.delete, allo

GROWI contains an access control vulnerability in the GET /_api/v3/revisions/:id endpoint that validates access against

GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:id endpoint that fails to validate page a

A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of th

A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAss

A vulnerability was detected in Releasit Releasit COD Form & Upsells v1. This vulnerability affects unknown code of the

DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used wi

Dell PowerStore contains an Argument Injection vulnerability. An authenticated user with limited privileges could potent

A weakness has been identified in Xinhu Rainrock RockOA up to 2.7.6. Affected by this issue is the function getOrder of

Incorrect access control in the updateLanIp function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attacke

Incorrect access control in the meshSlaveUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated atta

Incorrect access control in the staticInfoSend function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated atta

Incorrect access control in the sendStaticInfoToMaster function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthentica

Clickjacking issue in the DOM: Events component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunder

Denial-of-service in the PDF Viewer component. This vulnerability was fixed in Firefox 155 and Thunderbird 155.

Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunde

Other issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbir

Information disclosure in the WebExtensions component in Firefox for Android. This vulnerability was fixed in Firefox 15