CVE.report search for "CVE-2026-108259"
Listed below are 50 relevant search results for "CVE-2026-108259" based on Vendor, Software, and CVE description
These results are gathered from attempted matches with listed vendor and software data, as well as a keyword search in the description of all known CVEs.
If you notice a "Not Listed" in either the vendor or software columns, the underlying source record does not currently include normalized affected-product data.
Search Results
| CVE ID | Vendor | Software | Description |
|---|---|---|---|
| CVE-2026-126625 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated use... | ||
| CVE-2026-126624 | Unverified ownership in the Windows installer of Progressive Robot hMailServer 6.3.7 allows a local authenticated user to run... | ||
| CVE-2026-126623 | Inefficient algorithmic complexity in the JSON reader of Progressive Robot hMailServer 6.3.6 and 6.3.7 allows a remote attack... | ||
| CVE-2026-126622 | Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.3.7 allow a local authenticated use... | ||
| CVE-2026-126613 | Allocation of resources without limits in the JSON reader of Progressive Robot hMailServer 6.3.2 through 6.3.7 allows a remot... | ||
| CVE-2026-126612 | Improper link resolution in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.7 allows a local authent... | ||
| CVE-2026-126610 | Progressive Robot hMailServer 6.3.4 through 6.3.7, with a MySQL or MariaDB database and TlsMode=verify-full, does not hand th... | ||
| CVE-2026-126123 | BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the administrativ... | ||
| CVE-2026-126069 | Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML. Prior... | ||
| CVE-2026-125757 | mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators ... | ||
| CVE-2026-125378 | PowerDNS-Admin before 2026.11.0 contains a missing authorization vulnerability in the apply_records handler for /admin/templa... | ||
| CVE-2026-125359 | Mediary Scout before 2026.11.05 contains a server-side request forgery vulnerability that allows any authenticated user, incl... | ||
| CVE-2026-125346 | Rejected reason: Duplicate CVE. Replaced by CVE-2026-125350 | ||
| CVE-2026-124694 | In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, PropertyGrid does not encode boun... | ||
| CVE-2026-124693 | In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, PivotGrid and PivotConfigurator a... | ||
| CVE-2026-124692 | In Progress Kendo UI for jQuery versions 2026.3.1015 up to, but not including, 2026.4.1110, the Grid and TreeList column-reor... | ||
| CVE-2026-124690 | In Progress Kendo UI for jQuery, sanitizeSvgContent() parses custom icon markup into a live DOM before filtering it. An attac... | ||
| CVE-2026-124689 | In Progress Kendo UI for jQuery versions 2026.3.1014 up to, but not including, 2026.4.1110, ActionSheet does not encode title... | ||
| CVE-2026-124688 | In Progress® Kendo® UI for jQuery prior to 2026.4.1111 the TabStrip, PanelBar, and Menu widgets support mapping a dataSour... | ||
| CVE-2026-124687 | In Progress® Kendo® UI for jQuery versions from 2022.2.621 prior to 2026.4.1111 the DropDownButton and SplitButton allow ... | ||
| CVE-2026-124686 | In Progress® Kendo® UI for jQuery versions prior to 2026.4.1111, kendo.init() compiles data-* attribute values with new Fun... | ||
| CVE-2026-124610 | Rejected reason: 依 VUL-2026-008441 判定為主 | ||
| CVE-2026-124037 | An information exposure flaw in the public access-list sign-up feature of the Flock Safety Platform, present from 2026-06-23 ... | ||
| CVE-2026-124036 | Missing authorization checks in the visual alert feature of FlockOS, Flock's hosted public safety platform, prior to 2026-09-... | ||
| CVE-2026-123973 | SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user with the necessary permissi... | ||
| CVE-2026-123871 | Node.js discloses proxy credentials in ERR_PROXY_INVALID_CONFIG error messages. CVE-2026-48615 established that a proxy crede... | ||
| CVE-2026-123865 | An unauthenticated HTTP/2 client can permanently leak Node.js server memory and file descriptors. If a peer triggers a protoc... | ||
| CVE-2026-123858 | In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted proje... | ||
| CVE-2026-123857 | In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection | ||
| CVE-2026-123854 | In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module | ||
| CVE-2026-123853 | In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM optio... | ||
| CVE-2026-123850 | In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives | ||
| CVE-2026-123849 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers |
| CVE-2026-123848 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates |
| CVE-2026-123847 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command completion |
| CVE-2026-123846 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation |
| CVE-2026-123845 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects |
| CVE-2026-123844 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories |
| CVE-2026-123843 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration |
| CVE-2026-123842 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives |
| CVE-2026-123841 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive |
| CVE-2026-123840 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs |
| CVE-2026-123839 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development ... |
| CVE-2026-123838 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file |
| CVE-2026-123837 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run confi... |
| CVE-2026-123836 | In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup | ||
| CVE-2026-123835 | In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload race ... | ||
| CVE-2026-123834 | In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service acc... | ||
| CVE-2026-123833 | Jetbrains | Intellij Idea | In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects |
| CVE-2026-123832 | In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database | ||