CVE Notifier

CVE-2025-14754 CWE-78 8.8

IBM Cloud Pak for Data is vulnerable to OS command injection

IBM Cloud Pak for Data 5.1.2 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.

cve.org IBM:Cloud · Pak · for 1 hari lalu

CVE-2026-75031 CWE-94 N/A

CVE-2026-75031

In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was found in the “quick question” admin feature. In default installations arbitrary Perl code can be injected and executed se…

cve.org Interchange:Interchange 1 hari lalu

CVE-2025-14753 CWE-22 7.5

IBM Cloud Pak for Data is vulnerable to path traversal

IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on th…

cve.org IBM:Cloud · Pak · for 1 hari lalu

CVE-2026-81946 CWE-121 4.4

PLANET IGS-5225-8P2T4S V1/V2 Weak Password Hashing via MD5 Algorithm

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use MD5-based password hashing, a cryptographic algorithm with known weaknesses. An attacker who obtains…

cve.org PLANET · Technology · Corp.:PLANET 1 hari lalu

CVE-2026-81945 CWE-121 6.6

PLANET IGS-5225-8P2T4S V1/V2 Admin Stack-Based Buffer Overflow via Web Server

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions bfore 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into…

cve.org PLANET · Technology · Corp.:PLANET 1 hari lalu

CVE-2026-81944 CWE-121 7.5

PLANET IGS-5225-8P2T4S V1/V2 Stack-Based Buffer Overflow via Web Server

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied int…

cve.org PLANET · Technology · Corp.:PLANET 1 hari lalu

CVE-2026-81943 CWE-489 6.7

PLANET IGS-5225-8P2T4S V1/V2 Debug Mode RCE

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the d…

cve.org PLANET · Technology · Corp.:PLANET 1 hari lalu

CVE-2026-93531 CWE-352 4.3

gedelumbung HospitalManagement cross-site request forgery

A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This vulnerability affects unknown code. This manipulation causes cross-site request forgery. The attack ma…

cve.org gedelumbung:HospitalManagement 1 hari lalu

CVE-2026-81942 CWE-78 8.8

PLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web Server

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system…

cve.org PLANET · Technology · Corp.:PLANET 1 hari lalu

CVE-2025-53837 CWE-95 9.9

org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

XWiki Rendering is a generic rendering system that converts textual input in a given syntax (wiki syntax, HTML, etc) into another syntax (XHTML, etc). Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their o…

cve.org xwiki:xwiki-rendering 1 hari lalu

CVE-2026-93690 CWE-835 7.5

uri-js through 4.4.1 Denial of Service via removeDotSegments

uri-js through 4.4.1 contains a denial of service vulnerability in the removeDotSegments function that loops infinitely when a path segment begins with Unicode line or paragraph separators. Attackers can trigger this by …

cve.org garycourt:uri-js 1 hari lalu

CVE-2026-93689 CWE-476 5.5

WinFsp through 2.2.26215 NULL Pointer Dereference via Fast I/O

WinFsp through 2.2.26215 contains a null pointer dereference vulnerability in the kernel driver's Fast I/O device control handler that fails to validate the volume context before use. An unprivileged local user can trigg…

cve.org winfsp:winfsp 1 hari lalu