PT-2026-107869

Name of the Vulnerable Software and Affected Versions NetBoard CRM demo platform affected versions not specified Description An issue exists in the '/module/auth/recovery.php' endpoint where the user-name POST parameter is susceptible to SQL injection. This allows for blind attacks using Boolean,...

PT-2026-107909

Name of the Vulnerable Software and Affected Versions AKINSOFT WOLVOX Control Panel versions 26.02.25 through 26.02.25 Description An issue exists where sensitive information is inserted into sent data, allowing the pulling of data from system resources. Recommendations Update AKINSOFT WOLVOX...

PT-2026-108159

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2.2 Description A denial-of-service issue exists in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can send malformed task data. This...

PT-2026-108270

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.1 IBM Guardium Data Protection version 12.2.2 Description An issue exists where a remote attacker can delete arbitrary files. This occurs because the software fails to properly limit pathnames to a...

PT-2026-108266

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A path traversal issue in the Sniffer component allows a remote attacker to execute arbitrary code. Path traversal is a flaw that allows an attacker to access files and...

PT-2026-108272

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on t...

PT-2026-108237

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description Remote unauthenticated attackers can execute arbitrary code on the system, including appliance and container variants...

PT-2026-107825

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters...

PT-2026-107832

The Booking Calendar WordPress plugin before 11.8 does not generate its per-booking access hashes with sufficient entropy, deriving each from a low-entropy time-seeded value, which can allow unauthenticated attackers who are able to determine a booking's creation time to predict the hash and then...

PT-2026-108225

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description An SQL injection flaw allows a remote authenticated attacker to modify data and cause a denial of service. SQL...

PT-2026-108212

Name of the Vulnerable Software and Affected Versions Satel Netco Design versions prior to 2.1.7 Description A relative path traversal issue exists in the data import functionality. This allows an authenticated user with Viewer privileges to access file paths outside the intended directory and us...

PT-2026-108181

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2.2 Description Sensitive credential material is exposed during the rotation processing of SECRET and API KEY. The edge-controller and edge-manager components log this information at the INFO level. An...

PT-2026-108274

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overrun exists in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker can send a specially crafted TDS PRELOGIN packet to a network monitored by a...

PT-2026-108175

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.1 Description A heap-based buffer overflow exists in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that...

PT-2026-108180

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.1 IBM Guardium Data Protection version 12.2.2 Description The edge-controller component lacks proper authentication. This allows an unauthenticated remote attacker to execute arbitrary container images a...

PT-2026-108173

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A heap-based out-of-bounds read exists in the TDS7 LOGIN7 protocol parser. A remote attacker can exploit this by sending a specially crafted TDS LOGIN7 packet that contains...

PT-2026-108179

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A signature verification bypass exists in the patch installer. This flaw allows an attacker with local access to execute arbitrary code with root privileges, which is the highest level of...

PT-2026-108267

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description An issue exists that allows a remote attacker to execute unauthorized SQL statements on security database appliances. This is caused by SQL injection, a technique where...

PT-2026-108240

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

PT-2026-108176

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Stored cross-site scripting XSS exists in the Quick Search results grid. An unauthenticated attacker capable of influencing monitored database traffic can execute malicious scripts within t...