| IBM:7287290 |
Security Bulletin: IBM App Connect Enterprise and IBM Integration Bus for z/OS are vulnerable to multiple vulnerabilities due to…
|
IBM |
2026‑09‑13 |
Hoch |
| NCSC-2026-0367 |
NCSC-2026-0367 Kwetsbaarheid verholpen in GitLab Community en Enterprise Editions
|
NCSC-NL |
2026‑09‑12 |
Kritisch |
| IBM:7287286 |
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in protobuf-5.29.5-cp38-abi3-manylinux2014_x86_64.whl
|
IBM |
2026‑09‑12 |
Hoch |
| IBM:7287274 |
Security Bulletin: Multiple vulnerabilities that affects Cirata Symphony for IBM Big Replicate
|
IBM |
2026‑09‑12 |
Kritisch |
| IBM:7287271 |
Security Bulletin: IBM ApplinX is vulnerable to issues like Memory allocation, verification and validation issues due to the use of Bouncy…
|
IBM |
2026‑09‑12 |
Kritisch |
| GHSA-RQX4-3F6Q-3X2V |
@Mockoon/commons-server: Unauthenticated admin API + wildcard CORS allows mock-state hijack and secret theft
|
GitHub |
2026‑09‑11 |
Hoch |
| GHSA-RQFV-2MW9-78G2 |
MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)
|
GitHub |
2026‑09‑11 |
Kritisch |
| GHSA-J328-XMGP-J4Q3 |
Shopper: privilege escalation via improper Livewire admin component authorization
|
GitHub |
2026‑09‑11 |
Hoch |
| GHSA-H8M9-JGF8-VWVP |
Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover
|
GitHub |
2026‑09‑11 |
Kritisch |
| GHSA-G3F9-G5VJ-P62F |
Shopper: Unauthorized inventory stock manipulation via unlocked variant property in VariantStock component
|
GitHub |
2026‑09‑11 |
Hoch |
| GHSA-F7H9-QV4X-9X57 |
Shopping privilege escalation through missing authorization in Settings components
|
GitHub |
2026‑09‑11 |
Mittel |
| GHSA-99H5-JHH7-V3R3 |
Shopper: Media sub-form store() still lacks authorization (Incomplete fix for GHSA-h4mp-g9c6-xwph)
|
GitHub |
2026‑09‑11 |
Mittel |
| GHSA-992Q-9GWP-7R79 |
ZITADEL: Auto-linking by email: IdP-side email verification is not checked
|
GitHub |
2026‑09‑11 |
Mittel |
| GHSA-98Q5-5QH2-7W75 |
Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion
|
GitHub |
2026‑09‑11 |
Mittel |
| GHSA-8WQC-V2Q8-VFF2 |
@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)
|
GitHub |
2026‑09‑11 |
Mittel |
| GHSA-65H7-9WRW-629C |
FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix
|
GitHub |
2026‑09‑11 |
Hoch |
| GHSA-5VF4-452P-JJHF |
Shopper: Negative discount values accepted and propagated through order calculation pipeline
|
GitHub |
2026‑09‑11 |
Mittel |
| GHSA-325J-MG25-8Q58 |
yayson: Prototype pollution in Store/LegacyStore deserialization
|
GitHub |
2026‑09‑11 |
Kritisch |
| GHSA-2J95-GQXF-V3VG |
Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover
|
GitHub |
2026‑09‑11 |
Kritisch |
| GHSA-2CG9-97GQ-9MQP |
Shopper: Missing authorization on product removal actions in CollectionProducts component
|
GitHub |
2026‑09‑11 |
Hoch |