6 matches found
Security Bulletin: IBM Event Endpoint Management is affected by multiple vulnerabilities.
Summary IBM Event Endpoint Management is affected by multiple vulnerabilities. These are affecting the operator and frontend components. Vulnerability Details CVEID:CVE-2026-31988 DESCRIPTION: yauzl aka Yet Another Unzip Library version 3.2.0 for Node.js contains an off-by-one error in the NTFS...
Adobe Audition Out-of-Bounds Write Vulnerability (CNVD-2026-31988)
Adobe Audition is an audio editing software developed by Adobe, a company based in the United States. Adobe Audition has a cross-domain write vulnerability, which allows attackers to execute arbitrary code within the context of the current user...
ROOT-APP-NPM-CVE-2026-31988 CVE-2026-31988 in @rootio/yauzl - Patched by Root
Root has patched CVE-2026-31988 in the @rootio/yauzl package for Root:npm. Multiple fixed versions available...
CVE-2026-31988 vulnerabilities
Vulnerabilities for packages: foxx-cli, kibana, langfuse, langfuse-fips, gemini-cli, opensearch-dashboards, opensearch-dashboards-fips, renovate, code-server, librechat...
SUSE CVE-2026-31988
yauzl aka Yet Another Unzip Library version 3.2.0 for Node.js contains an off-by-one error in the NTFS extended timestamp extra field parser within the getLastModDate function. The while loop condition checks cursor data.length + 4 instead of cursor + 4 = data.length, allowing readUInt16LE to rea...
