Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a remote code execution and path-segment injection vulnerability (CVE-2026-14976, CVE-2026-15280)

Summary IBM WebSphere Application Server Liberty, which is bundled with IBM WebSphere Hybrid Edition, is affected by a remote code execution and path-segment injection vulnerability with the collectiveController-1.0 enabled. Vulnerability Details Refer to the security bulletins listed in the...

CVE-2026-14976

creationtimestamp| type| source ---|---|--- 2026-07-30 05:15:12+00:00| seen| https://www.hkcert.org/security-bulletin/ibm-websphere-products-multiple-vulnerabilities20260730...

CVE-2026-14976 IBM WebSphere Application Server Liberty is affected by a remote code execution and path-segment injection vulnerability

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with the collectiveController-1.0 feature enabled...

CVE-2025-14976

creationtimestamp| type| source ---|---|--- 2026-01-10 12:19:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mc2ynyns7m2q 2026-01-12 08:35:47+00:00| seen| https://gist.github.com/Darkcrai86/07e3666cbc3eef36834dbf9126c82dcb...

CVE-2020-14976

GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles configuration-file errors by printing the configuration file while executing in a setuid root context...

Linux Distros Unpatched Vulnerability : CVE-2017-14976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based buffer over- read vulnerability if an out-of-bounds font dictionary...

RHEL 5 : poppler (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - poppler: recursive function call in JBIG2Stream::readGenericBitmap in JBIG2Stream.cc causing denial of...

CVE-2020-14976

creationtimestamp| type| source ---|---|--- 2024-05-06 09:57:50+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/271...

Mageia: Security Advisory (MGASA-2017-0402)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-14976

GNS3 ubridge through 0.9.18 on macOS, as used in GNS3 server before 2.1.17, allows a local attacker to read arbitrary files because it handles configuration-file errors by printing the configuration file while executing in a setuid root context...

CVE-2020-14976

GNS3 ubridge (ubridge) up to version 0.9.18 on macOS, used by GNS3 server before 2.1.17, allows a local attacker to read arbitrary files. The root cause is that configuration-file errors are printed while running in a setuid root context, exposing file contents. Public references indicate the aff...

Huawei EulerOS: Security Advisory for poppler (EulerOS-SA-2017-1259)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-14976

CVE-2018-14976 affects QCMS 3.0.1. The vulnerability is a cross-site scripting flaw in upload/System/Controller/backend/category.php. The connected documents identify XSS in this file/version but do not provide details on exploit scenarios, impact scope beyond the generic XSS description, or any ...

CVE-2018-14976

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/category.php has XSS...

openSUSE Security Update : poppler (openSUSE-2018-648)

This update for poppler fixes the following issues : These security issues were fixed : - CVE-2017-14517: Prevent NULL pointer dereference in the XRef::parseEntry function via a crafted PDF document bsc1059066. - CVE-2017-9865: Fixed a stack-based buffer overflow vulnerability in GfxState.cc that...

openSUSE: Security Advisory for poppler (openSUSE-SU-2018:1721-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for poppler (moderate)

This update for poppler fixes the following issues: These security issues were fixed: - CVE-2017-14517: Prevent NULL Pointer dereference in the XRef::parseEntry function via a crafted PDF document bsc1059066. - CVE-2017-9865: Fixed a stack-based buffer overflow vulnerability in GfxState.cc that...

GLSA-201804-03 : Poppler: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201804-03 Poppler: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Poppler. Please review the CVE identifiers referenced below for details. Impact : A remote attacker, by enticing a user to open a special...

Ubuntu 14.04 LTS / 16.04 LTS : poppler vulnerabilities (USN-3517-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3517-1 advisory. It was discovered that poppler incorrectly handled certain files. If a user or automated system were tricked into opening a crafted PDF file,...

[SECURITY] [DSA 4079-1] poppler security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4079-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 07, 2018 https://www.debian.org/security/faq -...