CVE Vulnerabilities - 14 July 2026

A security issue in ColdFusion could allow an attacker to access sensitive data or make changes without permission. This could happen without the user's knowledge or action. To protect your system, up...

Debian Linux systems are at risk of unauthorized code being executed remotely. This means an attacker could gain control of a Debian Linux system without needing a password. To protect your system, en...

If you use Roundcube Webmail, a hacker can create a malicious email that can take control of your account without you even opening it. This is a serious issue because it allows an attacker to access y...

An unsecured port on Rockwell Automation's 1715 Redundant IO device allows hackers to access sensitive commands remotely. This could lead to data loss, system crashes, or unauthorized changes to the d...

An old version of YouTrack allowed attackers to bypass authentication and gain access to administrative features by directly accessing the database. This could have allowed hackers to make changes to ...

Opcenter X versions prior to V2604 do not properly check JWT headers. This allows an attacker to create fake user identities, potentially gaining full access to the application. Update to version V260...

A security issue in SonicWall SMA1000 Appliances could allow an attacker to trick the device into accessing unauthorized websites or services. This could potentially lead to data theft or other malici...

ColdFusion software is at risk of being exploited by malicious code that can execute arbitrary actions with the current user's permissions. This vulnerability can be exploited without user interaction...

ColdFusion software contains a vulnerability that allows an attacker to execute malicious code on a user's system. This means an attacker could potentially take control of a user's account and access ...

ColdFusion has a security flaw that could let hackers run unauthorized code on your server. This could happen without anyone needing to click on anything, making it a serious concern. You should updat...

ColdFusion's security has been compromised, allowing an attacker to access sensitive files without permission. This could lead to data theft or unauthorized changes. To protect your system, update Col...

ColdFusion users are at risk of having malicious code executed on their accounts if an attacker sends them a malicious input. This can happen without the user's knowledge or action. To protect yoursel...

An attacker can upload files outside the intended directory by submitting a filename with '../' segments. This allows them to potentially execute malicious code on your server. To fix this, ensure tha...

FacturaScripts' REST API has a security flaw that can expose sensitive information, including passwords and session data. This can happen when an attacker sends a specially crafted request to the API....

An attacker with authorized access to Windows VMSwitch over a network can potentially gain elevated privileges. This affects Windows systems and can be exploited by authorized users. To protect your n...

SAP NetWeaver ABAP systems are at risk of memory corruption, which could lead to unauthorized data access or system unavailability. This is a serious issue that could compromise confidentiality, integ...

Ciena Navigator and Blue Planet products may allow unauthorized access. This is a serious security risk because attackers can bypass security checks and gain access to sensitive areas without a passwo...

Ciena's Navigator Network Control Suite and Manage Control Plan have hidden system accounts with easily guessable passwords. These accounts don't have much power on their own, but an attacker could us...

A vulnerability in OpenHTJ2K versions 0.18.4 and earlier allows attackers to run unauthorized code on a system. This could lead to data theft or system compromise. Update to the latest version of Open...

OpenHTJ2K, a Java library for handling JPEG 2000 files, has a security issue that could allow an attacker to run unauthorized code on a system by sending it a specially crafted file. This is a serious...

A security issue in Twig's template language allowed a malicious template to bypass security checks and render other templates without proper security enforcement. This issue has been fixed in version...

A security setting in Twig allows certain templates to access sensitive features, which can be exploited by attackers. To prevent this, Twig developers should avoid using the template_from_string() fu...

A security flaw in Twig allows attackers to inject malicious PHP code into templates. This can lead to unauthorized access to sensitive data and potentially allow attackers to execute code on the serv...

Debian 12 users are at risk of having sensitive data exposed due to an unpatched OpenSSL issue. This vulnerability allows an attacker to intercept and read sensitive information, such as passwords and...

An attacker can use Aetopia Digital Asset Management DAM version 1.0.0 to run malicious code on a vulnerable server. This is a serious security risk because it could allow an attacker to access sensit...