Aggregator

A vulnerability was found in Unleash up to 8.0.2. It has been rated as problematic. The impacted element is the function sendRequestedCRApprovalEmail of the file src/mailtemplates/requested-cr-approval/requested-cr-approval.html.mustache of the component Email Template. Performing a manipulation of the argument changeRequestTitle/requesterName/requesterEmail results in injection. This vulnerability was named CVE-2026-76909. The attack may be initiated remotely. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in WeblateOrg wlc up to 2.0.0. It has been declared as problematic. The affected element is an unknown function of the file weblate.ini of the component Configuration. Such manipulation of the argument WLC_KEY/WLC_URL/--key leads to improper input validation. This vulnerability is uniquely identified as CVE-2026-62364. Local access is required to approach this attack. No exploit exists. It is recommended to upgrade the affected component.

A Chinese-speaking threat actor has been exploiting vulnerabilities in ZyXEL GS1900 Smart Managed Switches and WordPress to steal sensitive data from 996 devices and more than 18,500 records stored in backend databases. [...]

Explore F5 Labs’ 2026 PQC report: adoption trends, CDN dependence, TLS technical debt, certificate risks, and steps toward quantum resilience.

A vulnerability has been found in OpenJPEG up to 2.3.1 and classified as critical. Impacted is the function opj_t1_clbl_decode_processor of the file libopenjp2.so. The manipulation leads to out-of-bounds write. This vulnerability is documented as CVE-2020-6851. The attack can be initiated remotely. There is not any exploit available.

A vulnerability marked as critical has been reported in Sonatype Nexus Repository Manager 3.21.1/3.22.0. Affected is an unknown function of the component UI/API. The manipulation leads to incorrect authorization. This vulnerability is traded as CVE-2020-11753. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability described as problematic has been identified in Sonatype Nexus Repository Manager up to 3.25.0. Affected by this issue is some unknown functionality. Such manipulation leads to cross site scripting. This vulnerability is listed as CVE-2020-15869. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability classified as problematic has been found in Sonatype Nexus Repository Manager up to 3.25.0. This affects an unknown part. Performing a manipulation results in cross site scripting. This vulnerability is cataloged as CVE-2020-15870. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical was found in Sonatype Nexus Repository Manager up to 3.25.0. This vulnerability affects unknown code. Executing a manipulation can lead to incorrect permission assignment. This vulnerability is registered as CVE-2020-15871. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

A vulnerability labeled as critical has been found in Sonatype Nexus Repository Manager up to 3.30.0. This issue affects some unknown processing. Executing a manipulation can lead to improper access controls. This vulnerability appears as CVE-2021-29158. The attacker needs to be present on the local network. There is no available exploit.

A vulnerability described as problematic has been identified in Sonatype Nexus Repository up to 3.33.1-01. Impacted is an unknown function of the component HTTP Request Handler. Executing a manipulation can lead to injection. This vulnerability is registered as CVE-2021-40143. It is possible to launch the attack remotely. No exploit is available.

A vulnerability described as critical has been identified in Aruba ArubaOS 8.10.0.11/8.11.2.2/10.4.1.1/10.5.1.1. This issue affects some unknown processing of the component Access Point Management Protocol Handler. Executing a manipulation can lead to buffer overflow. This vulnerability is registered as CVE-2024-26305. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is recommended.

A vulnerability identified as critical has been detected in RTI Connext Professional up to 6.1.2.16/7.3.0.1. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in buffer overflow. This vulnerability is known as CVE-2024-52059. Attacking locally is a requirement. No exploit is available. You should upgrade the affected component.

A vulnerability classified as critical was found in HPE AOS-CX. This affects an unknown part of the component Firewall. Such manipulation leads to improper access controls. This vulnerability is traded as CVE-2024-54010. Access to the local network is required for this attack to succeed. There is no exploit available.

A vulnerability was found in Gardener up to 1.142.5/1.143.2/1.144.1/1.144.99. It has been classified as problematic. Impacted is the function mustCheckProjectMembers of the component customverbauthorizer. This manipulation causes improper authorization. This vulnerability is handled as CVE-2026-79767. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in ludocode MPack 1.1.1 and classified as critical. This issue affects the function mpack_node_cstr_alloc/mpack_node_utf8_cstr_alloc. The manipulation results in integer overflow. This vulnerability is known as CVE-2026-88350. It is possible to launch the attack remotely. No exploit is available.

A vulnerability has been found in lwIP up to 2.2.1 and classified as very critical. This vulnerability affects unknown code of the component MQTT. The manipulation leads to out-of-bounds write. This vulnerability is traded as CVE-2026-87121. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability, which was classified as problematic, was found in yaml-cpp 0.9.0. This affects the function Scanner::PopIndent of the file src/scanner.cpp of the component Scanner. Executing a manipulation can lead to information disclosure. This vulnerability appears as CVE-2026-75432. The attack may be performed from remote. There is no available exploit.

A vulnerability, which was classified as problematic, has been found in Joniles Mpxj up to 16.4.0. Affected by this issue is the function MerlinReader of the component Xml Parser. Performing a manipulation of the argument ZTIMEINTERVALS results in information disclosure. This vulnerability is reported as CVE-2026-61570. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.