CVE-2026-56852 affecting package etcd for versions less than 3.5.33-1

CVE-2026-56852 affecting package etcd for versions less than 3.5.33-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-12617 affecting package bind for versions less than 9.20.26-1

CVE-2026-12617 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-11605 affecting package bind for versions less than 9.20.26-1

CVE-2026-11605 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-11622 affecting package bind for versions less than 9.20.26-1

CVE-2026-11622 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-10723 affecting package bind for versions less than 9.20.26-1

CVE-2026-10723 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-11331 affecting package bind for versions less than 9.20.26-1

CVE-2026-11331 affecting package bind for versions less than 9.20.26-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-59818 affecting package etcd for versions less than 3.5.33-1

CVE-2026-59818 affecting package etcd for versions less than 3.5.33-1. An upgraded version of the package is available that resolves this issue...

veraPDF Parser DoS via PostScript Type 1 Font Programs

Summary Description A PostScript-interpreter-driven Denial of Service CWE-1325 vulnerability in veraPDF allows a remote attacker to exhaust validator memory or CPU by submitting a PDF whose Type 1 font /FontFile is a font program containing attacker-supplied PostScript. veraPDF's Type 1 font...

GHSA-7C26-995W-6F47 veraPDF Parser DoS via PostScript Type 1 Font Programs

Summary Description A PostScript-interpreter-driven Denial of Service CWE-1325 vulnerability in veraPDF allows a remote attacker to exhaust validator memory or CPU by submitting a PDF whose Type 1 font /FontFile is a font program containing attacker-supplied PostScript. veraPDF's Type 1 font...

CVE-2026-54081 veraPDF Parser DoS via PostScript Type 1 Font Programs

veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains a denial-of-service vulnerability in veraPDF-parser/src/main/java/org/verapdf/pd/font/type1/Type1FontProgram.java and veraPDF-parser/src/main/java/org/verapdf/parser/postscript/PSOperator.java,...

CVE-2026-54081

The VeraPDF CVE-2026-54081 vulnerability affects the veraPDF-parser component, specifically in Type1FontProgram.java and PSOperator.java. A crafted Type 1 font’s FontDescriptor/FontFile program can trigger unbounded PostScript array allocation, a zero-increment loop, or self-recursive toExecute u...

Exploit for CVE-2026-61511

CVE-2026-61511 – vBulletin Pre‑Auth RCE E...

[SECURITY] Fedora 44 Update: kronosnet-1.35-1.fc44

The kronosnet source...

PT-2026-65824

veraPDF PDF parser is a PDF parser for veraPDF. Prior to 1.30.2 and 1.31.23, veraPDF-parser contains a denial-of-service vulnerability in veraPDF-parser/src/main/java/org/verapdf/pd/font/type1/Type1FontProgram.java and veraPDF-parser/src/main/java/org/verapdf/parser/postscript/PSOperator.java,...

CVE-2025-69945: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /doctor/edit-patient.php?editid=1...

CVE-2025-69942: Improper Neutralization of Special Elements used in an SQL Command

kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1...

CVE-2026-54079: Improper Restriction of XML External Entity Reference

veraPDF validation provides PDF/A and PDF/UA validation, feature reporting, and metadata repair. From 1.17.35 until 1.30.2 and 1.31.71, veraPDF-validation contains an XML External Entity XXE vulnerability in validation-model/src/main/java/org/verapdf/gf/model/impl/pd/GFPDAcroForm.java in the...

CVE-2026-58153: Inconsistent Interpretation of HTTP Requests

Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked framing when converting HTTP/2 to HTTP/1. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue...

CVE-2026-59900: Inconsistent Interpretation of HTTP Requests

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, Netty's HTTP/2-to-HTTP/1.x translation layer Http2StreamFrameToHttpObjectCodec and InboundHttp2ToHttpAdapter fails to deduplicate or validate Host headers when an HTTP/2 client...

SUSE SLED15: ImageMagick / ImageMagick-config-7-SUSE / etc (SUSE-SU-2026:3335-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3335-1 advisory. This update for ImageMagick fixes the following issue - Extend CVE-2026-56379 patch by f63c78b bsc1268878. Tenable has...