CVE tracker
404 subscribers
5.99K links
News monitoring: @irnewsagency

Main channel: @orgsecuritygate

Site: SecurityGate.org
Download Telegram
CVE-2026-107146 - Insufficient session expiration in twofactor_gauthenticator

CVE ID :CVE-2026-107146
Published : Oct. 27, 2026, 9:35 a.m. | 29 minutes ago
Description :The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verification. Due to the lack of server-side session destruction, an attacker can ignore the logout redirect and keep the session alive. This may allow an attacker who obtains user's password to e.g. brute force the second-factor code. This issue was fixed in commit 4640889.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-107147 - Authentication bypass by spoofing in twofactor_gauthenticator

CVE ID :CVE-2026-107147
Published : Oct. 27, 2026, 9:36 a.m. | 29 minutes ago
Description :The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address headers. Due to the lack of validation of the Client-IP and X-Forwarded-For headers, an attacker who obtains user's password can spoof a whitelisted IP address, resulting in the second factor being bypassed. This issue was fixed in commit 4640889.
Severity: 6.3 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86574 - Heap-based Buffer Overflow Vulnerability in JP1/Base

CVE ID :CVE-2026-86574
Published : Oct. 27, 2026, 9:37 a.m. | 28 minutes ago
Description :Heap-based Buffer Overflow Vulnerability in JP1/Base. This issue affects JP1/Base: from 11-00 before 12-50-54.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86575 - Stack-based Buffer Overflow Vulnerability in JP1 Products

CVE ID :CVE-2026-86575
Published : Oct. 27, 2026, 9:37 a.m. | 28 minutes ago
Description :Stack-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86576 - Heap-based Buffer Overflow Vulnerability in JP1 Products

CVE ID :CVE-2026-86576
Published : Oct. 27, 2026, 9:37 a.m. | 28 minutes ago
Description :Heap-based Buffer Overflow Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-86577 - Out-of-bounds Write Vulnerability in JP1 Products

CVE ID :CVE-2026-86577
Published : Oct. 27, 2026, 9:37 a.m. | 28 minutes ago
Description :Out-of-bounds Write Vulnerability in JP1 Products. This issue affects JP1/Integrated Management 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Manager: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 13-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent Minimal Edition: from 13-00 before 13-50-31; JP1/Base: from 11-00 before 12-50-54.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-76933 - Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CVE ID :CVE-2026-76933
Published : Oct. 27, 2026, 9:37 a.m. | 28 minutes ago
Description :Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-76932 - Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CVE ID :CVE-2026-76932
Published : Oct. 27, 2026, 9:37 a.m. | 28 minutes ago
Description :Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-76934 - Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CVE ID :CVE-2026-76934
Published : Oct. 27, 2026, 9:37 a.m. | 28 minutes ago
Description :Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-76935 - Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CVE ID :CVE-2026-76935
Published : Oct. 27, 2026, 9:37 a.m. | 28 minutes ago
Description :Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-76938 - Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3

CVE ID :CVE-2026-76938
Published : Oct. 27, 2026, 9:37 a.m. | 28 minutes ago
Description :Authentication Bypass Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-76937 - Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CVE ID :CVE-2026-76937
Published : Oct. 27, 2026, 9:37 a.m. | 28 minutes ago
Description :Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-76936 - Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CVE ID :CVE-2026-76936
Published : Oct. 27, 2026, 9:37 a.m. | 28 minutes ago
Description :Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 10-00 before 13-50-31.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-76939 - Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3

CVE ID :CVE-2026-76939
Published : Oct. 27, 2026, 9:37 a.m. | 28 minutes ago
Description :Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 3. This issue affects JP1/Automatic Job Management System 3 - Manager: from 11-00 before 13-50-31; JP1/Automatic Job Management System 3 - Agent: from 11-00 before 13-50-31.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-82122 - Stack-based Buffer Overflow Vulnerability in HiRDB

CVE ID :CVE-2026-82122
Published : Oct. 27, 2026, 9:37 a.m. | 27 minutes ago
Description :Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity: 9.4 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-82121 - Origin Validation Error Vulnerability in HiRDB

CVE ID :CVE-2026-82121
Published : Oct. 27, 2026, 9:37 a.m. | 27 minutes ago
Description :Origin Validation Error Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity: 7.5 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-82119 - OS Command Injection Vulnerability in HiRDB

CVE ID :CVE-2026-82119
Published : Oct. 27, 2026, 9:37 a.m. | 27 minutes ago
Description :OS Command Injection Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-82120 - Heap-based Buffer Overflow Vulnerability in HiRDB

CVE ID :CVE-2026-82120
Published : Oct. 27, 2026, 9:37 a.m. | 27 minutes ago
Description :Heap-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-82118 - Stack-based Buffer Overflow Vulnerability in HiRDB

CVE ID :CVE-2026-82118
Published : Oct. 27, 2026, 9:37 a.m. | 27 minutes ago
Description :Stack-based Buffer Overflow Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-82116 - Missing Authentication for Critical Function Vulnerability in HiRDB

CVE ID :CVE-2026-82116
Published : Oct. 27, 2026, 9:37 a.m. | 27 minutes ago
Description :Missing Authentication for Critical Function Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2026-82117 - Authentication Bypass by Spoofing Vulnerability in HiRDB

CVE ID :CVE-2026-82117
Published : Oct. 27, 2026, 9:37 a.m. | 27 minutes ago
Description :Authentication Bypass by Spoofing Vulnerability in HiRDB. This issue affects HiRDB Server Version 10: from 10-00 before 10-12-01; HiRDB Server Version 9: from 09-00 through 09-66-22; HiRDB Server with Additional Function Version 9: from 09-00 through 09-66/V; HiRDB Server Version 9(32): from 09-02 through 09-66-22; HiRDB Server with Additional Function Version 9(32): from 09-00 through 09-66-/V.
Severity: 9.8 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...