Security Bulletin: IBM Sterling Connect:Direct FTP+ is vulnerable to various attacks due to IBM Runtime Environment Java Technology Edition Version 17

Summary IBM Java 17 is used by IBM Sterling Connect:Direct FTP+ on AIX, Linux, and Windows platforms in product configuration and data transmission. IBM Sterling Connect:Direct FTP+ on AIX, Linux, and Windows platforms is impacted by vulnerabilities in IBM Java 17. IBM Sterling Connect:Direct FTP...

Security Bulletin: IBM Maximo Application Suite - Predict Component was using vulnerable library werkzeug-3.1.3 which is vulnerable to CVE-2025-66221

Summary IBM Maximo Application Suite - Predict Component was using vulnerable library werkzeug-3.1.3-py3-none-any.whl which is vulnerable to CVE-2025-66221. This bulletin contains information addressing the vulnerability. Vulnerability Details CVEID:CVE-2025-66221 DESCRIPTION: Werkzeug is a...

Fedora: Security Advisory (FEDORA-2026-9e5037f4e6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2026-27591

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.7.7 iPadOS versions prior to 18.7.7 iOS versions prior to 26.4 iPadOS versions prior to 26.4 macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4 visionOS...

This Week in Spring - March 24th, 2026

Hi, Spring fans! Welcome to yet another rip-roarin' installment of This Week in Spring. As usual, we've got a ton to look into, so let's dive right in! Happy 22nd birthday to Spring Framework, released this day 22 years ago! and of course, next week, 1 April 2026, marks 12 years since Spring Boot...

amba-clcd Heap Buffer Overflow DoS

The vulnerability of the clcdfbofvramsetup function in the drivers/video/fbdev/amba-clcd.c driver for supporting Linux kernel video buffer devices is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-27610

Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.4 iPadOS versions prior to 26.4 macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4 Description An issue exists that may allow a remote attacker to cause a...

PT-2026-27546

Name of the Vulnerable Software and Affected Versions macOS Sequoia version 15.7.5 macOS Sonoma versions 14.8.5 macOS Tahoe version 26.4 Description An attacker with root privileges may be able to delete protected system files. The issue was addressed through improved state management...

USN-8119-2 systemd vulnerabilities

USN-8119-1 fixed vulnerabilities in systemd. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that systemd incorrectly handled certain cgroup paths. A local attacker could...

WordPress SR WP Minify HTML plugin <= 2.1 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin SR WP Minify HTML versions = 2.1...

WordPress Lobot Slider Administrator plugin <= 0.6.0 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Lobot Slider Administrator versions = 0.6.0...

Chromium: CVE-2026-4450 Out of bounds write in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-4449 Use after free in Blink

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Linux mt6359_accdet_parse_dt mt6359_parse_dt DoS

The vulnerability of the mt6359accdetparsedt and mt6359parsedt functions in the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

AppArmor Pivotroot Buffer Overflow DoS

The vulnerability of the aapivotroot function in the security/apparmor/mount.c module of the AppArmor security component for Linux kernel is related to errors during linkage updates. Exploiting this vulnerability can allow an attacker to cause a service failure...

netfilter kernel Heap Buffer Overflow DoS

The vulnerability of the nftsetelemexprclone function in the net/netfilter/nftablesapi.c module of the netfilter component of the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the qcomsmdparseedge function in the drivers/rpmsg/qcomsmd.c module of the Linux kernel is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux IPv6 ndisc_router_discovery Buffer Overflow DoS

The vulnerability of the ndiscrouterdiscovery function in the net/ipv6/ndisc.c module of the IPv6 protocol implementation in the Linux operating system is related to errors during link counter updates. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-27233

Security Advisory — My Page Profile Update Improper Authorization Summary An improper authorization issue in the My Page profile update feature may allow modification of arbitrary user information. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1...

python311-pypdf-6.9.1-1.1 on GA media (moderate)

python311-pypdf-6.9.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10403-1 Rating: moderate Cross-References: CVE-2026-33123 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...