CVEs
Browse the synced catalog, newest first.
- CVE-2026-125755Nodemailer 3.0.0 before 10.4.1 Recipient Allow-List Bypass via addressparsernodemailer
- CVE-2026-125754Dolibarr 20.0.0 through 23.0.4 and 24.x before 24.0.2 IDOR via ExpenseReport Payment APIdolibarr
- CVE-2026-125753ABP Framework before 10.6.2 and 10.7.0 Path Traversal via Blogging File Endpointsabpframework abp
- CVE-2026-111248Apache TomEE: Authentication with the stored password digest in Tomcat user identity storeApache Software Foundation org.apache.tomee:tomee-security
- CVE-2026-125752Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatusmeteroid-oss Meteroid
- CVE-2026-125751Meteroid before 2.2.0 Cross-Tenant API Token Hash Disclosure via GetApiTokenByIdmeteroid-oss Meteroid
- CVE-2026-125750Firekylin through 2.18.1 Improper Authorization via Admin REST API GET ActionsFirekylin
- CVE-2026-125749TaxHacker through 0.8.5 IDOR via Settings Server Actions userIdvas3k TaxHacker
- CVE-2026-125748Parabol before 15.21.2 Missing Authorization via addReactjiToReactable MutationParabol
- CVE-2026-125747ZenTao PMS through 22.7 IDOR via Build Module Mutation Methodseasysoft zentaopms
- CVE-2026-111249Apache TomEE: Unauthenticated LiveReload endpoint reachable from the networkApache Software Foundation org.apache.tomee:livereload-tomee
- CVE-2026-111250Apache TomEE: Authentication bypass via programmatic authentication in embedded HTTP serverApache Software Foundation org.apache.openejb:openejb-http…
- CVE-2026-111251Apache TomEE: Unauthenticated server shutdown via the admin portApache Software Foundation org.apache.openejb:openejb-serve…
- CVE-2026-111256Apache TomEE: Missing authentication for web service endpoints in embedded HTTP serverApache Software Foundation org.apache.openejb:openejb-we… +2
- CVE-2026-111257Apache TomEE: Well-known administrative credentials created at startupApache Software Foundation org.apache.openejb:tomee-catalin…
- CVE-2026-111258Apache TomEE: Security constraint bypass via request routingApache Software Foundation org.apache.openejb:tomee-catalin…
- CVE-2026-111259Apache TomEE: Predictable HTTP session identifiers in embedded serverApache Software Foundation org.apache.tomee:tomee-embedded
- CVE-2026-111260Apache TomEE: Predictable OpenID Connect state and nonce valuesApache Software Foundation org.apache.tomee:tomee-security
- CVE-2026-111261Apache TomEE: Authentication bypass with empty password in LDAP identity storeApache Software Foundation org.apache.tomee:tomee-security
- CVE-2026-111262Apache TomEE: LDAP injection in LDAP identity storeApache Software Foundation org.apache.tomee:tomee-security
- CVE-2026-111263Apache TomEE: Missing authentication on EJB web service endpoints deployed in a web applicationApache Software Foundation org.apache.openejb:tomee-webserv…
- CVE-2026-111264Apache TomEE: Authentication bypass on EJB web service endpoints via HTTP methodApache Software Foundation org.apache.openejb:tomee-webserv…
- CVE-2026-87756Apache TomEE: Missing authorization on internal deployer EJBs in default profileApache Software Foundation org.apache.openejb:openejb-core…
- CVE-2026-87755Apache TomEE: Stateful session bean hijacking via predictable session identifiersApache Software Foundation org.apache.openejb:openejb-core…
- CVE-2026-86811Apache TomEE: Path traversal via stateful EJB passivationApache Software Foundation org.apache.openejb:openejb-core…
- CVE-2026-86532Apache TomEE: Username enumeration and timing side channel in JAAS login modulesApache Software Foundation org.apache.openejb:openejb-core…
- CVE-2026-123082Docker Desktop logs can expose the Docker Hub access tokenDocker Desktop
- CVE-2026-113422In Eclipse Kura versions 5.0.0 through 5.6.2, the Wire Graph update functionality of the Kura Web UI, and the Wire Service REST API v1…Eclipse Foundation Eclipse Kura
- CVE-2026-121885Podman: untrusted image labels allow auto-update to restart arbitrary systemd unitspodman · Red Hat Enterprise Linux +2
- CVE-2026-114359Eclipse Kura downloads deployment packages (DPs) from a remote URL without any limit on the size of the data it receives.Eclipse Foundation Eclipse Kura