Total
414073 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-87143 | 1 Oracle | 1 Hyperion Data Relationship Management | 2026-09-22 | N/A | 7.4 HIGH |
| Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security). The supported version that is affected is 11.2.26.0.000. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Hyperion Data Relationship Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hyperion Data Relationship Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Hyperion Data Relationship Management accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N). | |||||
| CVE-2026-25275 | 1 Qualcomm | 752 5g Fixed Wireless Access Platform, 5g Fixed Wireless Access Platform Firmware, Aqt1000 and 749 more | 2026-09-22 | N/A | 7.5 HIGH |
| Transient DOS when processing authentication frames with invalid FILS information element header lengths. | |||||
| CVE-2026-24075 | 1 Qualcomm | 86 Aqt1000, Aqt1000 Firmware, Cologne and 83 more | 2026-09-22 | N/A | 7.8 HIGH |
| Memory Corruption when multiple threads issue concurrent IOCTL requests to the device control handler due to improper synchronization and race conditions. | |||||
| CVE-2026-88854 | 2026-09-22 | N/A | N/A | ||
| Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions showSearchResult() and showSearchResultAjax() read the textsearch/searchText request parameter with $input->getVar(), which is not a real Joomla filter method and falls through to a filter that strips HTML tags but does not touch quotes or SQL syntax. The value is concatenated directly into a LIKE clause with no escaping. The endpoint requires no login of any kind: mod_osgallery_search is a public, commonly-published search box. Any anonymous site visitor can inject a UNION SELECT and read arbitrary database content. | |||||
| CVE-2026-88855 | 2026-09-22 | N/A | N/A | ||
| Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveGallery() passes form data through a hand-rolled parser into Joomla’s Input object, then reads it back with the ARRAY/ STRING filter types, neither of which sanitises SQL content. Values from category_names[], catOrderIds, and image-ordering fields were concatenated directly into SQL with no quoting or integer cast, giving an authenticated core.manage user (a permission scoped to managing one gallery component, not administrator-wide trust) full read/write access to the database, including UNION-based extraction of #__users password hashes. | |||||
| CVE-2026-88857 | 2026-09-22 | N/A | N/A | ||
| Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveWatermark() copied an uploaded file into a web-accessible directory using the client-supplied filename exactly as sent, with no extension check, no content check, and no filename sanitisation of any kind. An authenticated core.manage user could upload a .php file disguised with an image Content-Type header and execute it directly by requesting the resulting path. | |||||
| CVE-2026-95623 | 2026-09-22 | N/A | 5.6 MEDIUM | ||
| The Tauri HTTP plugin validates requested URLs against the application's configured scope allowlist only once, on the initial request. When the remote server responds with an HTTP 3xx redirect, reqwest follows the redirect internally without re-checking the new target URL against the scope. This allows an attacker who controls an allowed URL (or finds an open redirect on an allowed host) to reach disallowed destinations such as cloud metadata endpoints, localhost services, or internal network hosts. | |||||
| CVE-2026-88856 | 2026-09-22 | N/A | N/A | ||
| Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions updateOSGallery(), reached via task=update_osgallery, read a JSON request body and called the value of a method field as a live PHP function, passing the value of a package field as its single argument, with no allow-list or is_callable() check of any kind. Any function name compatible with a single argument was directly reachable, including system, exec, shell_exec, and passthru. | |||||
| CVE-2026-75595 | 1 Netty | 1 Netty | 2026-09-22 | N/A | 9.1 CRITICAL |
| Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandler#decode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause an IndexOutOfBoundsException and invoke select(ctx, null). This selects the default SslContext instead of the SNI-specific context. In deployments where per-SNI clientAuth=REQUIRE is the sole mutual TLS gate, the default SslContext uses clientAuth=NONE or clientAuth=OPTIONAL, and no application-layer certificate verification exists, an unauthenticated remote attacker can bypass the protected route's mutual TLS requirement. This issue is fixed in versions 4.1.137.Final and 4.2.17.Final. | |||||
| CVE-2026-24073 | 1 Qualcomm | 28 Cologne, Cologne Firmware, Fastconnect 6900 and 25 more | 2026-09-22 | N/A | 7.8 HIGH |
| Memory corruption when processing decode statistics due to insufficient validation of offset against structure size. | |||||
| CVE-2026-24074 | 1 Qualcomm | 50 Cologne, Cologne Firmware, Fastconnect 6200 and 47 more | 2026-09-22 | N/A | 7.8 HIGH |
| Memory Corruption when processing data with large offset and length values exceeds buffer limits during data copy operations. | |||||
| CVE-2026-11711 | 2026-09-22 | N/A | 6.5 MEDIUM | ||
| IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vulnerability in the Name Service component. | |||||
| CVE-2026-11545 | 2026-09-22 | N/A | 3.7 LOW | ||
| IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to obtain sensitive information from the administrative console due to missing authorization checks. | |||||
| CVE-2026-11540 | 2026-09-22 | N/A | 5.3 MEDIUM | ||
| IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to obtain sensitive information about the file system through the FileTransfer servlet. | |||||
| CVE-2026-75878 | 2026-09-22 | N/A | 9.1 CRITICAL | ||
| IBM Sterling File Gateway could allow a remote attacker to bypass authentication and obtain a fully authenticated session due to improper authentication via an unvalidated SSO header. | |||||
| CVE-2026-75791 | 2026-09-22 | N/A | 8.6 HIGH | ||
| Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerable to an authentication bypass vulnerability in the REST API. | |||||
| CVE-2026-11716 | 2026-09-22 | N/A | 7.5 HIGH | ||
| IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attacker to cause a denial of service or potentially execute arbitrary code during queue manager startup due to improper validation of cluster migration data. | |||||
| CVE-2026-18869 | 2026-09-22 | N/A | 6.4 MEDIUM | ||
| IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions and access internal network services due to improper validation of FTP PORT and EPRT commands. | |||||
| CVE-2026-11727 | 2026-09-22 | N/A | 8.1 HIGH | ||
| IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remote attacker to cause a denial of service or potentially execute arbitrary code due to improper validation of queue manager responses when requesting AMS policy data. | |||||
| CVE-2026-11710 | 2026-09-22 | N/A | 6.5 MEDIUM | ||
| IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers. | |||||