Security Bulletin: Due to the use of JetBrains Kotlin, IBM webMethods BPM is vulnerable to the use of Java API for temporary file and folder creation

Summary IBM webMethods BPM uses JetBrains Kotlin which is vulnerable to the use of Java API for temporary file and folder creation. Vulnerability Details CVEID:CVE-2020-29582 DESCRIPTION: In JetBrains Kotlin before 1.4.21, a vulnerable Java API was used for temporary file and folder creation. An...

📄 F5 BIG-IP TMUI Unauthenticated Remote Code Execution

This Metasploit module exploits a directory traversal vulnerability in the F5 BIG-IP TMUI interface that allows unauthenticated attackers to execute arbitrary system commands via tmshCmd.jsp...

Ubuntu: Security Advisory (USN-8076-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-8747

creationtimestamp| type| source ---|---|--- 2026-03-09 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0252/...

CVE-2020-8749

creationtimestamp| type| source ---|---|--- 2026-03-09 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0252/...

CVE-2026-2020

creationtimestamp| type| source ---|---|--- 2026-03-07 03:21:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgguojnwgn2e 2026-03-07 08:15:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mghf4uyagj25 2026-03-07 08:15:56+00:00| seen|...

NewStart CGSL MAIN 6.06 (SP) : libvirt Vulnerability (NS-SA-2026-0022)

The remote NewStart CGSL host, running version MAIN 6.06 SP, has libvirt packages installed that are affected by a vulnerability: - An issue was discovered in qemuDomainGetStatsIOThread in qemu/qemudriver.c in libvirt 4.10.0 though 6.x before 6.1.0. A memory leak was found in the...

USN-8076-1 qtbase-opensource-src vulnerabilities

It was discovered that Qt did not correctly handle OpenSSL's error queue. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 20.04 LTS. CVE-2020-13962 It was discovered that Qt incorrectly handled certain XBM image files. If a user or...

Slackware Linux 15.0 / current telnet Vulnerability (SSA:2026-059-02)

The version of telnet installed on the remote host is prior to 0.17. It is, therefore, affected by a vulnerability as referenced in the SSA:2026-059-02 advisory. New telnet packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding...

Security Bulletin: Common Vulnerabilities found in Cloudera Data Platform Private Cloud base with IBM

Summary Common Vulnerabilities found in Cloudera Data Platform Private Cloud base with IBM v7.1.9. Upgrade to the latest service pack and hotfix to ensure fixes to the addressed vulnerabilities are obtained. Vulnerability Details CVEID:CVE-2020-9493 DESCRIPTION: A deserialization flaw was found i...

Slackware: Security Advisory (SSA:2026-059-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-7660

creationtimestamp| type| source ---|---|--- 2026-02-27 14:50:40+00:00| published-proof-of-concept| https://github.com/yahoo/serialize-javascript/security/advisories/GHSA-5c6j-r48x-rmvq 2026-05-19 01:47:50+00:00| seen| https://gist.github.com/joemocha/fe552c9601dc58c4f9731982ab0d1f8c...

CVE-2020-7017

creationtimestamp| type| source ---|---|--- 2026-02-27 14:10:21+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mftva4kls32b...

Exploit for CVE-2020-14645

CVE-2020-1...

EUVD-2026-8620

Coturn is a free open source implementation of TURN and STUN Server. Coturn is commonly configured to block loopback and internal ranges using "denied-peer-ip" and/or default loopback restrictions. CVE-2020-26262 addressed bypasses involving "0.0.0.0", "::1" and "::", but IPv4-mapped IPv6 is not...

CVE-2020-9310

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

CVE-2020-5498

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

PT-2026-21865

Name of the Vulnerable Software and Affected Versions Coturn versions prior to 4.9.0 Description Coturn, a free open source implementation of TURN and STUN Server, is susceptible to a bypass of loopback and internal range restrictions. Specifically, configurations using "denied-peer-ip" to block...

CVE-2020-0002

creationtimestamp| type| source ---|---|--- 2026-02-21 08:30:48+00:00| seen| https://gist.github.com/tu-trinh-scale/cd1ba4cd08070c596b6fbc51447a22b5...

CVE-2020-8165

creationtimestamp| type| source ---|---|--- 2026-02-21 05:21:02+00:00| seen| https://gist.github.com/tu-trinh-scale/43724f4565a68c378a712b69b412cbe1 2026-04-14 10:27:03+00:00| seen| https://gist.github.com/zhaog100/f7442a42e06d52a6f0350990fe3b28f1...