CVE.report search for "CVE-2026-120367"
Listed below are 50 relevant search results for "CVE-2026-120367" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-126644 | A link-following flaw was found in the authorized_key module of the ansible.posix collection, residual to the fix for CVE-202... | ||
| CVE-2026-126625 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated use... | ||
| CVE-2026-126624 | Unverified ownership in the Windows installer of Progressive Robot hMailServer 6.3.7 allows a local authenticated user to run... | ||
| CVE-2026-126623 | Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer 6.3.6 and 6.3.7 allows a remote attack... | ||
| CVE-2026-126622 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated use... | ||
| CVE-2026-126613 | Allocation of resources without limits in the JSON reader of Progressive Robot hMailServer 6.3.2 through 6.3.7 allows a remot... | ||
| CVE-2026-126612 | Improper link resolution in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.7 allows a local authent... | ||
| CVE-2026-126610 | Progressive Robot hMailServer 6.3.4 through 6.3.7, with a MySQL or MariaDB database and TlsMode=verify-full, does not hand th... | ||
| CVE-2026-126332 | Improper access control in the autofill vault search in Devolutions Server 2026.3.13.0 and earlier allows an authenticated us... | ||
| CVE-2026-126331 | Insertion of sensitive information into sent data in the user list endpoint in Devolutions Server 2026.3.13.0 and earlier all... | ||
| CVE-2026-126328 | Insertion of sensitive information into sent data in the user endpoints in Devolutions Server 2026.3.13.0 and earlier allows ... | ||
| CVE-2026-126327 | Improper access control in the connection history in Devolutions Server 2026.3.13.0 allows an authenticated user without the ... | ||
| CVE-2026-126326 | Improper access control in the administrative role assignment endpoint in Devolutions Server 2026.3.13.0 and earlier allows a... | ||
| CVE-2026-126123 | BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the administrativ... | ||
| CVE-2026-126069 | Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML. Prior... | ||
| CVE-2026-125757 | mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators ... | ||
| CVE-2026-125378 | PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the apply_records handler for /admin/templa... | ||
| CVE-2026-125359 | Mediary Scout before 2026.11.05 contains a server-side request forgery vulnerability that allows any authenticated user, incl... | ||
| CVE-2026-125346 | Rejected reason: Duplicate CVE. Replaced by CVE-2026-125350 | ||
| CVE-2026-124704 | In Telerik UI for WPF, versions prior to 2026.4.1110, a deserialization of untrusted data vulnerability exists that allows an... | ||
| CVE-2026-124703 | In Telerik UI for WPF, versions prior to 2026.4.1110, an improper control of code generation vulnerability exists that allows... | ||
| CVE-2026-124701 | In Telerik UI for WinForms, versions prior to 2026.4.1111, a deserialization of untrusted data vulnerability exists that allo... | ||
| CVE-2026-124699 | In Telerik UI for WinForms, versions prior to 2026.4.1111, an improper control of code generation vulnerability exists that a... | ||
| CVE-2026-124694 | In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, PropertyGrid does not encode boun... | ||
| CVE-2026-124693 | In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, PivotGrid and PivotConfigurator a... | ||
| CVE-2026-124692 | In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, the Grid and TreeList column-reor... | ||
| CVE-2026-124690 | In Progress Kendo UI for jQuery, sanitizeSvgContent() parses custom icon markup into a live DOM before filtering it. An attac... | ||
| CVE-2026-124689 | In Progress Kendo UI for jQuery versions 2026.3.1014 up to, but not including, 2026.4.1110, ActionSheet does not encode title... | ||
| CVE-2026-124688 | In Progress® Kendo® UI for jQuery prior to 2026.4.1111 the TabStrip, PanelBar, and Menu widgets support mapping a dataSour... | ||
| CVE-2026-124687 | In Progress® Kendo® UI for jQuery versions from 2022.2.621 prior to 2026.4.1111 the DropDownButton and SplitButton allow ... | ||
| CVE-2026-124686 | In Progress® Kendo® UI for jQuery versions prior to 2026.4.1111, kendo.init() compiles data-* attribute values with new Fun... | ||
| CVE-2026-124610 | Rejected reason: 依 VUL-2026-008441 判定為主 | ||
| CVE-2026-124037 | An information exposure flaw in the public access-list sign-up feature of the Flock Safety Platform, present from 2026-06-23 ... | ||
| CVE-2026-124036 | Missing authorization checks in the visual alert feature of FlockOS, Flock's hosted public safety platform, prior to 2026-09-... | ||
| CVE-2026-123973 | SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user with the necessary permissi... | ||
| CVE-2026-123871 | Node.js discloses proxy credentials in ERR_PROXY_INVALID_CONFIG error messages. CVE-2026-48615 established that a proxy crede... | ||
| CVE-2026-123865 | An unauthenticated HTTP/2 client can permanently leak Node.js server memory and file descriptors. If a peer triggers a protoc... | ||
| CVE-2026-123858 | In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted proje... | ||
| CVE-2026-123857 | In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection | ||
| CVE-2026-123854 | In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module | ||
| CVE-2026-123853 | In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM optio... | ||
| CVE-2026-123850 | In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives | ||
| CVE-2026-123849 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers |
| CVE-2026-123848 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates |
| CVE-2026-123847 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion |
| CVE-2026-123846 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation |
| CVE-2026-123845 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects |
| CVE-2026-123844 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories |
| CVE-2026-123843 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration |
| CVE-2026-123842 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives |