RCE (Remote Code Execution) org.bouncycastle:bcprov-lts8on Dependency in Confluence Data Center

This High severity RCE Remote Code Execution vulnerability was introduced in versions 8.9.0, 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

CVE-2026-19219

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

CVE-2026-19219

In Progress® Telerik® UI for AJAX (ASP.NET AJAX) prior to v2026.3.812 contains a vulnerability in the RadEditor file browser (DialogHandler UploadPaths). The root cause is insufficient integrity protection of dialog request parameters, which may allow an attacker who has obtained certain applicat...

CVE-2026-19219 DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

CVE-2026-19219 DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

EUVD-2026-69898

In Progress® Telerik® UI for AJAX prior to v2026.3.812, insufficient integrity protection of dialog request parameters used by the RadEditor file browser may allow an attacker who has obtained certain application encryption key material to alter the folders the file browser reads from, writes to,...

Zero-day vulnerabilities are exploited in SonicWall’s SMA1000 appliance.

SonicWall has identified vulnerabilities in the SMA1000 Appliance. The SMA1000 Appliance contains two vulnerabilities. The first is a pre-authentication Server-Side Request Forgery SSRF vulnerability in the Work Place interface, which allows an unauthorized external attacker to perform unauthoriz...

gimp: GIMP: Remote Code Execution via TIF file parsing integer overflow

A flaw was found in GIMP, an image manipulation program. This vulnerability allows a remote attacker to execute arbitrary code on an affected system. Exploitation requires user interaction, where the target must open a specially crafted TIF Tagged Image File Format file. The flaw occurs during TI...

gimp: GIMP: Remote code execution via PSD file parsing integer overflow

A flaw was found in GIMP. A remote attacker could exploit an integer overflow vulnerability within the readchanneldata function during PSD Photoshop Document file parsing by enticing a user to open a specially crafted PSD file. This could lead to arbitrary code execution in the context of the...

gimp: GIMP: Remote code execution via TIF file parsing vulnerability

A flaw was found in GIMP. This vulnerability, a stack-based buffer overflow in the TIF file parsing component, allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. The issue stems from insufficient...

gimp: GIMP: Remote code execution via TIF file parsing heap-based buffer overflow

A flaw was found in GIMP. This heap-based buffer overflow vulnerability in the TIF file parsing component allows a remote attacker to execute arbitrary code. User interaction is required, as the target must open a specially crafted malicious TIF file. Successful exploitation can lead to arbitrary...

gimp: GIMP: Remote Code Execution via SGI File Parsing Integer Overflow

A flaw was found in GIMP. This vulnerability, an integer overflow within the parsing of SGI Silicon Graphics Image files, allows a remote attacker to execute arbitrary code. Exploitation requires user interaction, where the target must open a specially crafted malicious SGI file. Successful...

Important: Red Hat Security Advisory: gimp:2.8 security update

An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

Important: Red Hat Security Advisory: gegl security update

An update for gegl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing

A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...

SUSE CVE-2026-40013

An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script. This causes memory corruption and an observed crash of the ManageSieve process, resulting in denial of...

Important: Red Hat Security Advisory: gegl04 security update

An update for gegl04 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing

A flaw was found in GIMP, specifically within the parsing of High Dynamic Range HDR files. This integer overflow vulnerability occurs due to insufficient validation of user-supplied data before memory allocation. A remote attacker could exploit this by convincing a user to open a specially crafte...

MobileIron Core & Connector <= v10.6 & Sentry <= v9.8 - Remote Code Execution

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database RDB version 2.0.0.1 and earlier contain...