RSS Feeds > Computer & Technik > Internet > Marketing > scip AG [Security - Consulting - Information - Process] | RSS Verzeichnis

scip AG [Security - Consulting - Information - Process]


Anzeigen einer beliebigen Anzahl von Sicherheitsl?cken aus der scip AG Datenbank.

Betreiber-URL: https://www.scip.ch
RSS-Feed-URL: https://www.scip.ch/alertRSS.xml
Die neuesten Einträge aus dem RSS-Feed von scip AG [Security - Consulting - Information - Process]:
CVE-2026-100353 | getkin kin-openapi up to 0.148.x openapi3filter decoder urlValuesDecoder.parseArray array/deepObject null pointer dereference
15.10.2026 18:36
A vulnerability has been found in getkin kin-openapi up to 0.148.x and classified as problematic. Affected by this vulnerability is the function urlValuesDecoder.parseArray of the component openapi3fi...
CVE-2026-100352 | getkin kin-openapi up to 0.147.x OpenAPI Validation ValidateRequest null pointer dereference
15.10.2026 18:20
A vulnerability, which was classified as problematic, was found in getkin kin-openapi up to 0.147.x. Affected is the function ValidateRequest of the component OpenAPI Validation. Such manipulation lea...
CVE-2026-71490 | OPNsense up to 26.1.10 ACL hasPrivilege privileges management
15.10.2026 18:11
A vulnerability, which was classified as problematic, has been found in OPNsense up to 26.1.10. This impacts the function OPNsense\Core\ACL::hasPrivilege of the component ACL. This manipulation causes...
CVE-2026-100349 | getkin kin-openapi up to 0.145.x Response Validation openapi3filter.ValidateResponse null pointer dereference
15.10.2026 18:10
A vulnerability classified as problematic was found in getkin kin-openapi up to 0.145.x. This affects the function openapi3filter.ValidateResponse of the component Response Validation. The manipulatio...
CVE-2026-97712 | Sonatype Nexus Repository up to 3.96.x privileges management
15.10.2026 18:09
A vulnerability classified as critical has been found in Sonatype Nexus Repository up to 3.96.x. The impacted element is an unknown function. The manipulation leads to improper privilege management. ...
CVE-2026-92982 | Red Hat Advanced Cluster Management for Kubernetes Ansible Operator Plugins special elements in template engine
15.10.2026 18:09
A vulnerability described as very critical has been identified in Red Hat Advanced Cluster Management for Kubernetes, Ansible Automation Platform, Migration Toolkit for Applications, Migration Toolkit...
CVE-2026-97667 | Sonatype Nexus Repository up to 3.96.x Browse User Interface cross site scripting
15.10.2026 18:08
A vulnerability marked as problematic has been reported in Sonatype Nexus Repository up to 3.96.x. Impacted is an unknown function of the component Browse User Interface. Performing a manipulation res...
CVE-2026-97665 | Sonatype Nexus Repository up to 3.96.x NuGet Components improper authorization
15.10.2026 18:07
A vulnerability labeled as problematic has been found in Sonatype Nexus Repository up to 3.96.x. This issue affects some unknown processing of the component NuGet Components. Such manipulation leads t...
CVE-2026-97666 | Sonatype Nexus Repository up to 3.96.x ExtDirect Endpoint information disclosure
15.10.2026 18:06
A vulnerability identified as problematic has been detected in Sonatype Nexus Repository up to 3.96.x. This vulnerability affects unknown code of the component ExtDirect Endpoint. This manipulation ca...
CVE-2026-97394 | getkin kin-openapi up to 0.142.x OpenAPI Filter ValidateRequest/ValidateResponse null pointer dereference
15.10.2026 18:06
A vulnerability categorized as problematic has been discovered in getkin kin-openapi up to 0.142.x. This affects the function ValidateRequest/ValidateResponse of the component OpenAPI Filter. The mani...
CVE-2026-100350 | getkin kin-openapi up to 0.145.x DeepObject Decoder urlValuesDecoder.DecodeObject allocation of resources
15.10.2026 18:05
A vulnerability was found in getkin kin-openapi up to 0.145.x. It has been rated as problematic. Affected by this issue is the function urlValuesDecoder.DecodeObject of the component DeepObject Decode...
CVE-2026-100351 | getkin kin-openapi up to 0.146.x Validation openapi3filter.ValidationHandler access control
15.10.2026 18:04
A vulnerability was found in getkin kin-openapi up to 0.146.x. It has been declared as critical. Affected by this vulnerability is the function openapi3filter.ValidationHandler of the component Valida...
CVE-2026-100347 | getkin kin-openapi up to 0.144.x Legacy Router openapi3.PathItem.GetOperation input validation
15.10.2026 18:04
A vulnerability was found in getkin kin-openapi up to 0.144.x. It has been classified as problematic. Affected is the function openapi3.PathItem.GetOperation of the component Legacy Router. Performing...
CVE-2026-111096 | JetBrains TeamCity prior 2026.2/2026.1.4/2025.11.8 Build Log cross site scripting
15.10.2026 18:02
A vulnerability was found in JetBrains TeamCity and classified as problematic. This impacts an unknown function of the component Build Log. Such manipulation leads to cross site scripting. This vulne...
CVE-2026-111095 | JetBrains TeamCity prior 2026.2/2026.1.4/2025.11.8 Project Overview cross site scripting
15.10.2026 18:00
A vulnerability has been found in JetBrains TeamCity and classified as problematic. This affects an unknown function of the component Project Overview. This manipulation causes cross site scripting. ...
CVE-2026-111092 | JetBrains YouTrack Mail Rules privileges management
15.10.2026 17:59
A vulnerability, which was classified as problematic, was found in JetBrains YouTrack. The impacted element is an unknown function of the component Mail Rules. The manipulation results in improper pri...
CVE-2026-111093 | JetBrains Datalore up to 2026.2.0 Report Blob Endpoint path traversal
15.10.2026 17:59
A vulnerability, which was classified as problematic, has been found in JetBrains Datalore up to 2026.2.0. The affected element is an unknown function of the component Report Blob Endpoint. The manipu...
CVE-2026-111091 | JetBrains Junie CLI up to 26.8.2 MCP Server Configuration code injection
15.10.2026 17:58
A vulnerability classified as problematic was found in JetBrains Junie CLI up to 26.8.2. Impacted is an unknown function of the component MCP Server Configuration. Executing a manipulation can lead to...
CVE-2026-111094 | JetBrains TeamCity prior 2026.2/2026.1.4/2025.11.8 Build Messages Protocol input validation
15.10.2026 17:57
A vulnerability classified as critical has been found in JetBrains TeamCity. This issue affects some unknown processing of the component Build Messages Protocol. Performing a manipulation results in i...
CVE-2026-105474 | WebPros SolusVM up to 2.0.0-44576 special elements in template engine
15.10.2026 17:57
A vulnerability described as very critical has been identified in WebPros SolusVM up to 2.0.0-44576. This vulnerability affects unknown code. Such manipulation leads to improper neutralization of spec...
CVE-2026-88753 | markdown2 up to 2.5.5 lib/markdown2.py extract_metadata redos
15.10.2026 17:56
A vulnerability marked as problematic has been reported in markdown2 up to 2.5.5. This affects the function extract_metadata of the file lib/markdown2.py. This manipulation causes inefficient regular ...
CVE-2026-45451 | Unitronics UniStream Pro/UniLogic up to 1.41.329 improper authentication
15.10.2026 17:55
A vulnerability labeled as very critical has been found in Unitronics UniStream Pro and UniLogic up to 1.41.329. Affected by this issue is some unknown functionality. The manipulation results in impro...
CVE-2026-45452 | Unitronics UniStream Pro/UniLogic up to 1.41.328 format string
15.10.2026 17:55
A vulnerability identified as very critical has been detected in Unitronics UniStream Pro and UniLogic up to 1.41.328. Affected by this vulnerability is an unknown functionality. The manipulation lead...
CVE-2026-45449 | Unitronics UniStream Pro/UniLogic up to 1.41.328 os command injection
15.10.2026 17:54
A vulnerability categorized as very critical has been discovered in Unitronics UniStream Pro and UniLogic up to 1.41.328. Affected is an unknown function. Executing a manipulation can lead to os comma...
CVE-2026-45450 | Unitronics UniStream Pro/UniLogic prior 1.41.329 memory corruption
15.10.2026 17:54
A vulnerability was found in Unitronics UniStream Pro and UniLogic. It has been rated as critical. This impacts an unknown function. Performing a manipulation results in memory corruption. This vulne...
CVE-2026-100348 | getkin kin-openapi up to 0.144.x Loader resolveComponent null pointer dereference
15.10.2026 17:53
A vulnerability was found in getkin kin-openapi up to 0.144.x. It has been declared as problematic. This affects the function resolveComponent of the component Loader. Such manipulation leads to null ...
CVE-2026-58390 | OPNsense up to 26.1.10 Dashboard Widget OpenVPNClients.js common_name cross site scripting
15.10.2026 17:52
A vulnerability was found in OPNsense up to 26.1.10. It has been classified as problematic. The impacted element is an unknown function of the file src/opnsense/www/js/widgets/OpenVPNClients.js of the...
CVE-2026-63442 | OPNsense up to 26.1.10 WebGUI Login syslog-ng-lockout.conf readline usernamefld injection
15.10.2026 17:52
A vulnerability was found in OPNsense up to 26.1.10 and classified as critical. The affected element is the function readline of the file syslog-ng-lockout.conf of the component WebGUI Login. The mani...
CVE-2026-109449 | Sensiolabs Symfony up to 5.4.53/6.4.47/7.4.20/8.1.8 ExpressionLanguage ExpressionLanguage::lint resource consumption
15.10.2026 17:50
A vulnerability has been found in Sensiolabs Symfony up to 5.4.53/6.4.47/7.4.20/8.1.8 and classified as problematic. Impacted is the function ExpressionLanguage::lint of the component ExpressionLangua...
CVE-2026-58394 | OPNsense up to 26.1.10 SSL Certificate Selector system_advanced_admin.php legacy_html_escape_form_data a_cert cross site scripting
15.10.2026 17:50
A vulnerability, which was classified as problematic, was found in OPNsense up to 26.1.10. This issue affects the function legacy_html_escape_form_data of the file src/www/system_advanced_admin.php of...
CVE-2026-58392 | OPNsense up to 26.1.10 Ntp Gps Page services_ntpd_gps.php base64_decode initcmd cross-site request forgery
15.10.2026 17:49
A vulnerability, which was classified as problematic, has been found in OPNsense up to 26.1.10. This vulnerability affects the function base64_decode of the file src/www/services_ntpd_gps.php of the c...
CVE-2026-52167 | AOC LC32D1320 2.05 gensub_ParsePsb stack-based overflow
15.10.2026 17:39
A vulnerability classified as problematic was found in AOC LC32D1320 2.05. This affects the function gensub_ParsePsb. Such manipulation leads to stack-based buffer overflow. This vulnerability is doc...
CVE-2026-95155 | FasterXML Jackson up to 1.9.13 ObjectMapper.readValue denial of service
15.10.2026 17:37
A vulnerability classified as problematic has been found in FasterXML Jackson 1.8.3/1.9.2/1.9.11/1.9.12/1.9.13. Affected by this issue is the function ObjectMapper.readValue. This manipulation causes ...
CVE-2026-58391 | OPNsense up to 26.1.10 Firewall Rules/NAT Views filter_rule.volt cross site scripting
15.10.2026 17:37
A vulnerability described as problematic has been identified in OPNsense up to 26.1.10. Affected by this vulnerability is an unknown functionality of the file filter_rule.volt of the component Firewal...
CVE-2026-75505 | EspoCRM up to 10.0.1 Mass Update Processor mass-update attachment identifier permission
15.10.2026 17:36
A vulnerability marked as problematic has been reported in EspoCRM up to 10.0.1. Affected is the function mass-update of the component Mass Update Processor. The manipulation of the argument attachmen...
CVE-2026-57155 | OPNsense up to 26.1.10 GeoIP Importer geoip.py process_zip/process_gzip country_code path traversal
15.10.2026 17:35
A vulnerability labeled as very critical has been found in OPNsense up to 26.1.10. This impacts the function process_zip/process_gzip of the file src/opnsense/scripts/filter/lib/alias/geoip.py of the ...
CVE-2026-58395 | OPNsense up to 26.1.10 Safe-Delete config.xml delBase xpath injection
15.10.2026 17:34
A vulnerability identified as problematic has been detected in OPNsense up to 26.1.10. This affects the function ApiMutableModelControllerBase::delBase of the file config.xml of the component Safe-Del...
CVE-2026-58393 | OPNsense up to 26.1.10 OpenVPN Client Specific Override client_connect.php openvpn_csc_conf_write common_name path traversal
15.10.2026 17:34
A vulnerability categorized as problematic has been discovered in OPNsense up to 26.1.10. The impacted element is the function openvpn_csc_conf_write of the file client_connect.php of the component Op...
CVE-2026-53582 | OPNsense up to 26.1.9 Trust module CAsField.php refid information disclosure
15.10.2026 17:33
A vulnerability was found in OPNsense up to 26.1.9. It has been rated as problematic. The affected element is an unknown function of the file src/opnsense/mvc/app/models/OPNsense/Trust/FieldTypes/CAsF...
CVE-2026-95179 | Airbnb lottie-android up to 6.7.1 Precomposition Reference Graph BaseLayer.forModel/CompositionLayer recursion
15.10.2026 17:21
A vulnerability was found in Airbnb lottie-android up to 6.7.1. It has been declared as problematic. Impacted is the function BaseLayer.forModel/CompositionLayer of the component Precomposition Refere...
CVE-2026-77460 | EspoCRM up to 10.0.2 Renderer information disclosure
15.10.2026 17:20
A vulnerability was found in EspoCRM up to 10.0.2. It has been classified as problematic. This issue affects some unknown processing of the component Renderer. The manipulation leads to information di...
CVE-2026-79843 | HPE NonStop SQL/MX EXE out-of-bounds
15.10.2026 17:20
A vulnerability was found in HPE NonStop SQL and MX EXE and classified as very critical. This vulnerability affects unknown code. Executing a manipulation can lead to out-of-bounds read. This vulnera...
CVE-2026-63130 | EspoCRM up to 9.3.9 Label Manager permission
15.10.2026 17:19
A vulnerability has been found in EspoCRM up to 9.3.9 and classified as problematic. This affects an unknown part of the component Label Manager. Performing a manipulation results in permission issues...
CVE-2026-109413 | SensioLabs Symfony up to 5.4.53/6.4.44/7.4.17/8.1.5 Yaml lexInlineStructure stack-based overflow
15.10.2026 17:18
A vulnerability, which was classified as problematic, was found in SensioLabs Symfony up to 5.4.53/6.4.44/7.4.17/8.1.5. Affected by this issue is the function Yaml\Parser::lexInlineStructure of the co...
CVE-2026-104586 | AnoopAlias AUTOM8N Plugin borg_restore.cgi os command injection (82821f7)
15.10.2026 17:12
A vulnerability, which was classified as very critical, has been found in AnoopAlias AUTOM8N Plugin. Affected by this vulnerability is an unknown functionality of the file borg_restore.cgi. This manip...
CVE-2026-79841 | HPE NonStop RDMA SERVICES NSK buffer overflow
15.10.2026 17:11
A vulnerability classified as critical was found in HPE NonStop RDMA SERVICES NSK. Affected is an unknown function. The manipulation results in buffer overflow. This vulnerability is reported as CVE-...
CVE-2026-79840 | HPE NonStop XABroker buffer overflow
15.10.2026 17:11
A vulnerability classified as very critical has been found in HPE NonStop XABroker. This impacts an unknown function. The manipulation leads to buffer overflow. This vulnerability is documented as CV...
CVE-2026-95180 | Justson agentweb-core up to 5.1.6-androidx Intent access control
15.10.2026 17:10
A vulnerability described as critical has been identified in Justson agentweb-core up to 5.1.6-androidx. This affects an unknown function of the component Intent Handler. Executing a manipulation can ...
CVE-2026-46708 | EspoCRM up to 9.3.6 improper authorization
15.10.2026 17:09
A vulnerability marked as problematic has been reported in EspoCRM up to 9.3.6. The impacted element is an unknown function. Performing a manipulation results in improper authorization. This vulnerab...
CVE-2026-103509 | Perforce P4 Search up to 2026.4.2 Configuration API missing encryption
15.10.2026 17:09
A vulnerability labeled as problematic has been found in Perforce P4 Search up to 2026.4.2. The affected element is an unknown function of the component Configuration API. Such manipulation leads to m...
CVE-2026-46694 | EspoCRM up to 9.3.6 Portal Note API information disclosure
15.10.2026 17:08
A vulnerability identified as problematic has been detected in EspoCRM up to 9.3.6. Impacted is an unknown function of the component Portal Note API. This manipulation causes information disclosure. ...
CVE-2026-53575 | EspoCRM up to 9.3.8 applicationName cross site scripting
15.10.2026 17:08
A vulnerability categorized as problematic has been discovered in EspoCRM up to 9.3.8. This issue affects some unknown processing. The manipulation of the argument applicationName results in cross sit...
CVE-2026-55184 | EspoCRM up to 9.3.8 Email Template moderateSanitizeHtml cross site scripting
15.10.2026 17:07
A vulnerability was found in EspoCRM up to 9.3.8. It has been rated as problematic. This vulnerability affects the function moderateSanitizeHtml of the component Email Template. The manipulation leads...
CVE-2026-46691 | EspoCRM up to 9.3.6 Import /api/v1/Import id privileges management
15.10.2026 17:06
A vulnerability was found in EspoCRM up to 9.3.6. It has been declared as problematic. This affects an unknown part of the file /api/v1/Import of the component Import. Executing a manipulation of the ...
CVE-2026-59994 | EspoCRM up to 9.3.8 Email Received Stream Notification cross site scripting
15.10.2026 17:06
A vulnerability was found in EspoCRM up to 9.3.8. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Email Received Stream Notification. Perfo...
CVE-2026-53574 | EspoCRM up to 9.3.7 streamAttachments where sql injection
15.10.2026 17:05
A vulnerability was found in EspoCRM up to 9.3.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component streamAttachments. Such manipulation of the arg...
CVE-2026-108082 | Sensiolabs Symfony up to 5.4.53/6.4.45/7.4.18/8.1.6 http-foundation HeaderUtils::split resource consumption
15.10.2026 17:05
A vulnerability has been found in Sensiolabs Symfony up to 5.4.53/6.4.45/7.4.18/8.1.6 and classified as problematic. Affected is the function HeaderUtils::split of the component http-foundation. This ...
CVE-2026-55154 | EspoCRM up to 9.3.8 Export Processor Processor.php sanitizeCellValue code injection
15.10.2026 17:04
A vulnerability, which was classified as problematic, was found in EspoCRM up to 9.3.8. This impacts the function sanitizeCellValue of the file application/Espo/Tools/Export/Format/Csv/Processor.php o...
CVE-2026-47168 | EspoCRM up to 9.3.6 MassAction/Export deserialization
15.10.2026 17:04
A vulnerability, which was classified as problematic, has been found in EspoCRM up to 9.3.6. This affects an unknown function. The manipulation of the argument MassAction/Export leads to deserializati...
CVE-2026-79839 | HPE NonStop ODBC MX buffer overflow
15.10.2026 16:49
A vulnerability classified as very critical was found in HPE NonStop ODBC MX. The impacted element is an unknown function. Executing a manipulation can lead to buffer overflow. This vulnerability app...
CVE-2026-79838 | HPE NonStop ODBC/MX Services buffer overflow
15.10.2026 16:48
A vulnerability classified as very critical has been found in HPE NonStop ODBC and MX Services. The affected element is an unknown function of the component MX Services. Performing a manipulation resu...
CVE-2026-110746 | TotalSecurity TotalAV up to 7.1.17 gRPC IPC IPC.dll path traversal
15.10.2026 16:36
A vulnerability described as very critical has been identified in TotalSecurity TotalAV up to 7.1.17. Impacted is an unknown function of the file IPC.dll of the component gRPC IPC. Such manipulation l...
CVE-2026-110936 | Siemens Software Center uncontrolled search path
15.10.2026 16:35
A vulnerability marked as critical has been reported in Siemens Software Center. This issue affects some unknown processing. This manipulation causes uncontrolled search path. This vulnerability is r...
CVE-2026-108116 | Progress Kendo UI for jQuery up to 2026.3.1014 PivotGrid XMLA transport injection (EUVD-2026-102080)
15.10.2026 16:35
A vulnerability labeled as problematic has been found in Progress Kendo UI for jQuery up to 2026.3.1014. This vulnerability affects unknown code of the component PivotGrid XMLA transport. The manipula...
CVE-2026-106153 | Progress Kendo UI for jQuery up to 2026.3.1014 Calendar cross site scripting (EUVD-2026-102079)
15.10.2026 16:35
A vulnerability identified as problematic has been detected in Progress Kendo UI for jQuery up to 2026.3.1014. This affects an unknown part of the component Calendar. The manipulation leads to cross s...
CVE-2026-106151 | Progress Kendo UI for jQuery up to 2026.3.1014 Validator cross site scripting (EUVD-2026-102078)
15.10.2026 16:34
A vulnerability categorized as problematic has been discovered in Progress Kendo UI for jQuery up to 2026.3.1014. Affected by this issue is some unknown functionality of the component Validator. Execu...
CVE-2026-106150 | Progress Kendo UI for jQuery up to 2026.3.1014 Splitter/Window/Tooltip cross site scripting
15.10.2026 16:34
A vulnerability was found in Progress Kendo UI for jQuery up to 2026.3.1014. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the component Splitter/Wind...
CVE-2026-9703 | Grafana Data Source Proxy /loki/api/v1/rules access control
15.10.2026 16:33
A vulnerability was found in Grafana. It has been declared as problematic. Affected is an unknown function of the file /loki/api/v1/rules of the component Data Source Proxy. Such manipulation leads to...
CVE-2026-106149 | Progress Kendo UI for jQuery up to 2026.3.1014 Menu cross site scripting
15.10.2026 16:33
A vulnerability was found in Progress Kendo UI for jQuery up to 2026.3.1014. It has been classified as problematic. This impacts an unknown function of the component Menu. This manipulation causes cro...
CVE-2026-103508 | Perforce P4 Search up to 2026.4.2 Logging Configuration path traversal
15.10.2026 16:32
A vulnerability was found in Perforce P4 Search up to 2026.4.2 and classified as very critical. This affects an unknown function of the component Logging Configuration. The manipulation results in pat...
CVE-2026-104024 | PeaZip up to 11.2.x Archive Object Viewer peach.pas grid_obj_open incomplete blacklist
15.10.2026 15:52
A vulnerability has been found in PeaZip up to 11.2.x and classified as critical. The impacted element is the function grid_obj_open of the file peach.pas of the component Archive Object Viewer. The m...
CVE-2026-93649 | Eclipse Adoptium Temurin Download Page /[locale]/download String.startsWith link redirect (cbb53cf)
15.10.2026 15:52
A vulnerability, which was classified as problematic, was found in Eclipse Adoptium Temurin. The affected element is the function String.startsWith of the file /[locale]/download of the component Down...
CVE-2026-106161 | Progress Kendo UI for jQuery 2020.1.114-2026.3.1014 Badge Badge text method cross site scripting
15.10.2026 15:51
A vulnerability, which was classified as problematic, has been found in Progress Kendo UI for jQuery 2020.1.114-2026.3.1014. Impacted is the function Badge text method of the component Badge. Performi...
CVE-2026-106160 | Progress Kendo UI for jQuery up to 2026.3.1014 Model Model.accept prototype pollution
15.10.2026 15:51
A vulnerability classified as critical was found in Progress Kendo UI for jQuery up to 2026.3.1014. This issue affects the function Model.accept of the component Model. Such manipulation leads to impr...
CVE-2026-106159 | Progress Kendo UI for jQuery up to 2026.3.1014 ToolBar ButtonGroup cross site scripting
15.10.2026 15:50
A vulnerability classified as problematic has been found in Progress Kendo UI for jQuery up to 2026.3.1014. This vulnerability affects unknown code of the component ToolBar ButtonGroup. This manipulat...
CVE-2026-106147 | Progress Kendo UI for jQuery up to 2026.3.1014 ListBox cross site scripting
15.10.2026 15:50
A vulnerability described as problematic has been identified in Progress Kendo UI for jQuery up to 2026.3.1014. This affects an unknown part of the component ListBox. The manipulation results in cross...
CVE-2026-106163 | Progress Kendo UI for jQuery up to 2026.3.1014 FileBrowser/ImageBrowser cross site scripting
15.10.2026 15:49
A vulnerability marked as problematic has been reported in Progress Kendo UI for jQuery up to 2026.3.1014. Affected by this issue is some unknown functionality of the component FileBrowser/ImageBrowse...
CVE-2026-106162 | Progress Kendo UI for jQuery up to 2026.3.1014 FileManager cross site scripting
15.10.2026 15:49
A vulnerability labeled as problematic has been found in Progress Kendo UI for jQuery up to 2026.3.1014. Affected by this vulnerability is an unknown functionality of the component FileManager. Execut...
CVE-2026-106158 | Progress Kendo UI for jQuery up to 2026.3.811 Scheduler cross site scripting
15.10.2026 15:48
A vulnerability identified as problematic has been detected in Progress Kendo UI for jQuery up to 2026.3.811. Affected is an unknown function of the component Scheduler. Performing a manipulation resu...
CVE-2026-106157 | Progress Kendo UI for jQuery prior 2026.3.1015 PanelBar cross site scripting
15.10.2026 15:48
A vulnerability categorized as problematic has been discovered in Progress Kendo UI for jQuery. This impacts an unknown function of the component PanelBar. Such manipulation leads to cross site script...
CVE-2026-106148 | Progress Kendo UI for jQuery up to 2026.3.1014 TabStrip/Menu/PanelBar cross site scripting
15.10.2026 15:47
A vulnerability was found in Progress Kendo UI for jQuery up to 2026.3.1014. It has been rated as problematic. This affects an unknown function of the component TabStrip/Menu/PanelBar. This manipulati...
CVE-2026-110924 | Red Hat Enterprise Linux GSSAPI improper authentication
15.10.2026 15:47
A vulnerability was found in Red Hat Enterprise Linux, Hardened Images and OpenShift Container Platform. It has been declared as critical. The impacted element is an unknown function of the component ...
CVE-2026-110927 | Red Hat Enterprise Linux Compression inflate allocation of resources
15.10.2026 15:46
A vulnerability was found in Red Hat Enterprise Linux, Hardened Images and OpenShift Container Platform. It has been classified as critical. The affected element is the function inflate of the compone...
CVE-2026-109702 | Maxfoundry Social Share Buttons Plugin up to 1.31 on WordPress share-button cross site scripting
15.10.2026 15:19
A vulnerability was found in Maxfoundry Social Share Buttons Plugin up to 1.31 on WordPress and classified as problematic. Impacted is an unknown function of the component share-button. Executing a ma...
CVE-2026-109685 | Link Whisper Free Plugin up to 0.9.7 on WordPress cross site scripting
15.10.2026 15:18
A vulnerability has been found in Link Whisper Free Plugin up to 0.9.7 on WordPress and classified as problematic. This issue affects some unknown processing. Performing a manipulation results in cros...
CVE-2026-105882 | meGrill User Registration Plugin up to 5.2.8 on WordPress cross site scripting
15.10.2026 15:18
A vulnerability, which was classified as problematic, was found in meGrill User Registration Plugin up to 5.2.8 on WordPress. This vulnerability affects unknown code. Such manipulation leads to cross ...
CVE-2026-107416 | Webba Plugins Webba Booking Plugin up to 6.5.2 on WordPress authorization
15.10.2026 15:17
A vulnerability, which was classified as problematic, has been found in Webba Plugins Webba Booking Plugin up to 6.5.2 on WordPress. This affects an unknown part. This manipulation causes authorizatio...
CVE-2026-109892 | DynamiApps Frontend Admin Plugin up to 3.29.13 on WordPress privileges management
15.10.2026 15:16
A vulnerability classified as critical was found in DynamiApps Frontend Admin Plugin up to 3.29.13 on WordPress. Affected by this issue is some unknown functionality. The manipulation results in impro...
CVE-2026-109688 | Link Whisper Free Plugin up to 0.9.7 on WordPress sql injection
15.10.2026 15:16
A vulnerability classified as critical has been found in Link Whisper Free Plugin up to 0.9.7 on WordPress. Affected by this vulnerability is an unknown functionality. The manipulation leads to sql in...
CVE-2026-109686 | Link Whisper Plugin up to 0.9.7 on WordPress deserialization
15.10.2026 15:16
A vulnerability described as critical has been identified in Link Whisper Plugin up to 0.9.7 on WordPress. Affected is an unknown function. Executing a manipulation can lead to deserialization. This ...
CVE-2026-102389 | WPMU DEV Broken Link Checker Plugin up to 2.4.14.1 on WordPress code injection
15.10.2026 15:15
A vulnerability marked as problematic has been reported in WPMU DEV Broken Link Checker Plugin up to 2.4.14.1 on WordPress. This impacts an unknown function. Performing a manipulation results in code ...
CVE-2026-88794 | Sparx Systems Enterprise Architect 17.1 XSLT Debugger xml external entity reference
15.10.2026 15:00
A vulnerability labeled as critical has been found in Sparx Systems Enterprise Architect 17.1. This affects an unknown function of the component XSLT Debugger. Such manipulation leads to xml external ...
CVE-2026-99999 | Linux Kernel up to 7.3-rc6 ipv4 skb_checksum_help stack-based overflow
15.10.2026 15:00
A vulnerability identified as very critical has been detected in Linux Kernel up to 7.3-rc6. The impacted element is the function skb_checksum_help of the component ipv4. This manipulation causes stac...
CVE-2026-109693 | WP ManageNinja Fluent CRM Plugin up to 3.2.5 on WordPress privileges management (EUVD-2026-102026)
15.10.2026 14:33
A vulnerability categorized as critical has been discovered in WP ManageNinja Fluent CRM Plugin up to 3.2.5 on WordPress. The affected element is an unknown function. The manipulation results in impro...
CVE-2026-79837 | HPE NonStop SQL/MX UDR input validation
15.10.2026 14:32
A vulnerability was found in HPE NonStop SQL and MX UDR. It has been rated as problematic. Impacted is an unknown function. The manipulation leads to improper input validation. This vulnerability is ...
CVE-2026-109698 | Kitae Park Mang Board Plugin up to 2.4.4 on WordPress sql injection (EUVD-2026-102028)
15.10.2026 14:32
A vulnerability was found in Kitae Park Mang Board Plugin up to 2.4.4 on WordPress. It has been declared as critical. This issue affects some unknown processing. Executing a manipulation can lead to s...
CVE-2026-109692 | meGrill User Registration Plugin up to 5.2.8 on WordPress authorization (EUVD-2026-102027)
15.10.2026 14:31
A vulnerability was found in meGrill User Registration Plugin up to 5.2.8 on WordPress. It has been classified as critical. This vulnerability affects unknown code. Performing a manipulation results i...
CVE-2026-110724 | Eclipse Connected Services Platform up to 1.7.3 api-gateway ClientIpKeyResolver inclusion of web functionality from an untrusted source (EUVD-2026-102029)
15.10.2026 14:31
A vulnerability was found in Eclipse Connected Services Platform up to 1.7.3 and classified as critical. This affects the function ClientIpKeyResolver of the component api-gateway. Such manipulation l...
CVE-2026-110723 | Eclipse Connected Services Platform up to 1.7.3 api-gateway ClientIpKeyResolver X-Forwarded-For config (EUVD-2026-102030)
15.10.2026 14:31
A vulnerability has been found in Eclipse Connected Services Platform up to 1.7.3 and classified as problematic. Affected by this issue is the function ClientIpKeyResolver of the component api-gateway...
CVE-2026-104025 | PeaZip up to 11.2.x Archive Object Viewer peach.pas execute_obj path traversal
15.10.2026 14:30
A vulnerability, which was classified as problematic, was found in PeaZip up to 11.2.x. Affected by this vulnerability is the function execute_obj of the file peach.pas of the component Archive Object...
RSS Feed eintragen

Machen Sie Ihren RSS-Feed bekannt und erhöhen Sie die Sichtbarkeit Ihrer Website!

RSS-Feed eintragen
RSS-Reader
RSS-Reader finden Sie unter unsere Übersicht: RSS-Reader
Die neuesten Feeds
Die Top-Feeds
meist gelesenen Feeds