PT-2026-108180

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.1 IBM Guardium Data Protection version 12.2.2 Description The edge-controller component lacks proper authentication. This allows an unauthenticated remote attacker to execute arbitrary container images a...

PT-2026-108159

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2.2 Description A denial-of-service issue exists in the edge-controller. An unauthenticated remote attacker with network access to the edge-controller gRPC service can send malformed task data. This...

PT-2026-108645

Summary Rendering an untrusted SVG whose contains many segments is On² CPU. A single under 1 MiB burns tens of seconds. Two independent On² sites in cairosvg/path.py: 1. Tokenizer — the path-data parser consumes the d string with a while string: loop that repeatedly slices/re-scans the remaining...

PT-2026-107782

A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data across...

PT-2026-108179

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A signature verification bypass exists in the patch installer. This flaw allows an attacker with local access to execute arbitrary code with root privileges, which is the highest level of...

PT-2026-108237

Name of the Vulnerable Software and Affected Versions IBM Security Verify Access versions 10.0 through 10.0.9.2 IBM Verify Identity Access versions 11.0 through 11.0.3 Description Remote unauthenticated attackers can execute arbitrary code on the system, including appliance and container variants...

PT-2026-108174

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A heap-based buffer overflow exists in the MongoDB protocol parser. A remote attacker can trigger memory corruption by sending a specially crafted MongoDB SCRAM username with ...

PT-2026-108274

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overrun exists in the TDS Microsoft SQL Server PRELOGIN packet decoder. A remote attacker can send a specially crafted TDS PRELOGIN packet to a network monitored by a...

PT-2026-108269

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overflow allows a remote attacker to execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is...

PT-2026-108272

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A stack-based buffer overflow allows a remote attacker to execute arbitrary code. A stack-based buffer overflow occurs when a program writes more data to a buffer located on t...

PT-2026-108273

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.1 IBM Guardium Data Protection version 12.2.2 Description Remote attackers can execute arbitrary commands due to improper neutralization of special elements used in an OS command. This issue occurs when...

PT-2026-108177

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A local privilege escalation exists in the cp wrapper component. A low-privileged local user can exploit this issue to obtain root privileges, allowing them to access or modify sensitive...

PT-2026-108176

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Stored cross-site scripting XSS exists in the Quick Search results grid. An unauthenticated attacker capable of influencing monitored database traffic can execute malicious scripts within t...

PT-2026-108275

Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.2 Description A buffer overflow allows a remote attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2026-107909

Name of the Vulnerable Software and Affected Versions AKINSOFT WOLVOX Control Panel versions 26.02.25 through 26.02.25 Description An issue exists where sensitive information is inserted into sent data, allowing the pulling of data from system resources. Recommendations Update AKINSOFT WOLVOX...

Linux Distros Unpatched Vulnerability : CVE-2026-98315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: protect runlist updates with the runlist lock ntfsnonresidentattrshrink calls runlist...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Redis vulnerabilities (USN-8866-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8866-1 advisory. It was discovered that Redis did not properly manage memory when handling the TLS pending-data list. A remote attacker could...

ROS-20261008-73-0250

The vulnerability in the kernel-lt is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2026-106066

A heap-based buffer overflow was found in GIMP’s raw data export plug-in. When exporting very large images, gmalloc sizing based on overflowing width height bytes-per-pixel can allocate far less memory than GEGL reads or writes during export, following integer overflow...

UBUNTU-CVE-2026-106580

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a missing security-policy check in the CUT encoder allows a crafted local encoding operation to read data that policy should deny and can also cause a crash. This issue ...