383258 matches found
ROS-20261009-73-0036
The vulnerability of the idxdconfdevicerelease function in the drivers/dma/idxd/sysfs.c module of the Intel Data Accelerator driver for the Linux operating system is related to an unvalidated error condition. Exploiting this vulnerability could allow a attacker to cause a service failure...
The vulnerability of the Aiohttp HTTP client, related to a lack of mechanism for source verification, allows attackers to access confidential data.
The vulnerability of the Aiohttp HTTP client is related to a lack of mechanisms for verifying the source of the connection. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...
PT-2026-108984
Name of the Vulnerable Software and Affected Versions pyLoad versions prior to 0.5.0b3.dev101 Description The rpc function in api blueprint.py handles multipart/form-data uploads by reading the entire content of the uploaded file into memory using file.read before sending the data to the underlyi...
PT-2026-108769
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bpf component where an LWT SEG6LOCAL program can invalidate its cached Segment Routing Header SRH using the bpf lwt seg6 adjust srh function and subsequently call...
AZL-107258 CVE-2026-97032 affecting package containerized-data-importer 1.62.0-8
HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the...
AZL-107252 CVE-2026-78669 affecting package containerized-data-importer 1.62.0-8
A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...
AZL-107255 CVE-2026-78659 affecting package containerized-data-importer 1.62.0-8
When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending ...
AZL-107249 CVE-2026-78660 affecting package containerized-data-importer 1.62.0-8
Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a...
AZL-107264 CVE-2026-78663 affecting package containerized-data-importer 1.62.0-8
The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configur...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Denial of Service.
Summary minimatch is used by IBM Storage Fusion Data Foundation, which could cause a Denial of Service. CVE-2026-26996. Vulnerability Details CVEID:CVE-2026-26996 DESCRIPTION: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 a...
CVE-2026-21589: Critical Pre-Authentication File Read Affects Atlassian Data Center Products
Atlassian has released an out-of-band security advisory for CVE-2026-21589, a critical arbitrary file access vulnerability affecting a broad range of its Data Center products. The flaw carries a CVSS 4.0 score of 9.3 and can be exploited remotely without authentication or user interaction. Becaus...
Security Bulletin: IBM Fusion Data Foundation is vulnerable to Denial of Service.
Summary brace-expansion is used by IBM Fusion Data Foundation, which could cause a Denial of Service. CVE-2026-45149. Vulnerability Details CVEID:CVE-2026-45149 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6,...
Security Bulletin: IBM Fusion Data Foundation is vulnerable to Denial of Service.
Summary picomatch is used by IBM Fusion Data Foundation, which could cause a Denial of Service. CVE-2026-33671, CVE-2026-33672. Vulnerability Details CVEID:CVE-2026-33671 DESCRIPTION: Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regul...
Security Bulletin: IBM Fusion Data Foundation is vulnerable to Denial of Service.
Summary fast-xml-parser is used by IBM Fusion Data Foundation, which could cause a Denial of Service. CVE-2026-73569. Vulnerability Details CVEID:CVE-2026-73569 DESCRIPTION: fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks. From 5.9.3 until...
CVE-2026-105404
A flaw was found in ImageMagick. This vulnerability allows a remote attacker to achieve arbitrary code execution or unauthorized data access by supplying crafted input values to the PostScript a page description language coders. Because the application fails to properly sanitize and escape values...
Security Bulletin: IBM Storage Fusion Data Foundation is vulnerable to Improper Input Validation.
Summary uuid is used by IBM Fusion Data Foundation, which could cause Improper Input Validation. CVE-2026-41907. Vulnerability Details CVEID:CVE-2026-41907 DESCRIPTION: uuid is for the creation of RFC9562 formerly RFC4122 UUIDs. Prior to 14.0.0, v3, v5, and v6 accept external output buffers but d...
CVE-2026-87980
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a local attacker to obtain sensitive information due to cleartext storage of sensitive information in logs...
CVE-2026-84249
IBM Guardium Data Protection 12.2, and 12.2.2 could allow a remote attacker to execute arbitrary management operations due to missing authentication for critical function...