7732 matches found
Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation
Summary When enablejsonp=True, oauthlib's RevocationEndpoint reflects the user-supplied callback parameter directly into JavaScript response bodies on both success and error paths without validating that it is a legal JSONP callback name. This allows arbitrary JavaScript response generation inste...
GHSA-HJ66-6F7G-4R5V Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation
Summary When enablejsonp=True, oauthlib's RevocationEndpoint reflects the user-supplied callback parameter directly into JavaScript response bodies on both success and error paths without validating that it is a legal JSONP callback name. This allows arbitrary JavaScript response generation inste...
Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses multiple dependencies which are vulnerable to multiple High Severity CVEs.
Summary IBM Maximo Application Suite - Visual Inspection component uses multiple dependencies which are vulnerable to multiple High Severity CVEs. This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-67312 DESCRIPTION: axios...
Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition
Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate Developer Edition version 2.17.0 Vulnerability Details CVEID:CVE-2026-42923 DESCRIPTION: NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the...
Security Bulletin: Vulnerabilities addressed in IBM Watson OpenScale
Summary Multiple vulnerabilities have been identified in IBM Watson OpenScale. The vulnerabilities affect the versions listed in the Affected Products and Versions section and have been addressed in the corresponding versions. Refer to the Vulnerability Details and Remediation/Fixes sections for...
Security Bulletin: Multiple vulnerabilities addressed in IBM watsonx.governance, IBM AI Factsheets, and IBM Watson OpenScale
Summary Multiple vulnerabilities have been identified in IBM watsonx.governance, IBM AI Factsheets, and IBM Watson OpenScale. The vulnerabilities affect the versions listed in the Affected Products and Versions section and have been addressed. Refer to the Vulnerability Details and...
Toptech TMS7 and TopHAT
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to access critical data or execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network...
CVE-2026-68954: Improper Neutralization of Special Elements used in an SQL Command
The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability...
PT-2026-102902
The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability...
Debian dla-4798 : libdbi-perl - security update
The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4798 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4798-1 [email protected]...
Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2026-3144)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3144 advisory. The fix for CVE-2026-0716 commit 6ff7ef0, libsoup 3.6.6 placed the integer overflow guard inside the if masked block, leaving unmasked server-to-client frames unprotected. A malicious WebSocke...
Amazon Linux 2 : kernel (ALASKERNEL-5.15-2026-116)
The version of kernel installed on the remote host is prior to 5.15.220-153.252. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-116 advisory. In the Linux kernel, the following vulnerability has been resolved: tls: separate no-async decryption...
Amazon Linux 2 : kernel (ALASKERNEL-5.10-2026-132)
The version of kernel installed on the remote host is prior to 5.10.268-266.1092. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2026-132 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible res...
Security Bulletin: Multiple Vulnerabilities in IBM On Call Manager Mobile Application
Summary Multiple vulnerabilities were addressed in IBM On Call Manager Android and iOS mobile applications version 1.2.0 Vulnerability Details CVEID:CVE-2025-71329 DESCRIPTION: image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block th...
Security Bulletin: Multiple security vulnerabilities have been identified in Python packages shipped with IBM Guardium Cryptography Manager (GCM)
Summary Multiple security vulnerabilities identified in Python packages shipped with IBM Guardium Cryptography Manager GCM have been addressed Vulnerability Details CVEID:CVE-2026-48775 DESCRIPTION: LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB...
Security Bulletin: Threat Intelligence App for IBM QRadar SIEM contains components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Threat Intelligence App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-33671 DESCRIPTION: Picomatch i...
Security Bulletin: The Use Case Manager App for IBM QRadar SIEM contains components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Use Case Manager App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-65898 DESCRIPTION: DOMPurify befo...
Security Bulletin: IBM Sterling Secure Proxy is vulnerable to multiple issues
Summary Multiple vulnerabilities affect IBM Sterling Secure Proxy and are addressed in the latest release and fixpack. Vulnerability Details CVEID:CVE-2026-54512 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From...
MiracleLinux 9 : postgresql:18 (AXSA:2026-1927:01)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1927:01 advisory. postgresql: PostgreSQL: SQL injection in pgcreatesubscriber allows arbitrary SQL execution as superuser CVE-2026-6476 postgresql: PostgreSQL:...
