198 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-48979
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PHP Standard Library PSL is set of APIs covering async, collections, networking, I/O, cryptography, terminal UI, etc. In versions 6.1.0, 6.1.1 and 6.2.0, the...
CVE-2026-6344
CVE-2026-6344 affects the WordPress Fluent Forms plugin (versions ≤ 6.2.1). The vulnerability arises in EmailNotificationActions::getAttachments() where attacker-supplied file-upload URLs are resolved to filesystem paths without strictly enforcing the uploads directory boundary. Path traversal se...
Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tar-6.2.1.tgz
Summary IBM Watson Discovery Cartridge affected by vulnerability in tar-6.2.1.tgz Vulnerability Details CVEID:CVE-2026-23745 DESCRIPTION: node-tar is a Tar for Node.js. The node-tar library = 7.5.2 fails to sanitize the linkpath of Link hardlink and SymbolicLink entries when preservePaths is fals...
EUVD-2026-20899
fast-jwt has a ReDoS when using RegExp in allowed leading to CPU exhaustion during token verification...
EUVD-2026-20898
fast-jwt: Stateful RegExp /g or /y causes non-deterministic allowed-claim validation logical DoS...
CVE-2026-35041 ReDoS in fast-jwt when using RegExp in allowed* leading to CPU exhaustion during token verification
fast-jwt provides fast JSON Web Token JWT implementation. From 5.0.0 to 6.2.0, a denial-of-service condition exists in fast-jwt when the allowedAud verification option is configured using a regular expression. Because the aud claim is attacker-controlled and the library evaluates it against the...
CVE-2026-35041 ReDoS in fast-jwt when using RegExp in allowed* leading to CPU exhaustion during token verification
fast-jwt provides fast JSON Web Token JWT implementation. From 5.0.0 to 6.2.0, a denial-of-service condition exists in fast-jwt when the allowedAud verification option is configured using a regular expression. Because the aud claim is attacker-controlled and the library evaluates it against the...
CVE-2026-35040
fast-jwt provides fast JSON Web Token JWT implementation. Prior to 6.2.1, using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options in verify functions can cause certain unintended behaviours. This is because some modifiers are statef...
RHSA-2026:5611 Red Hat Security Advisory: Red Hat JBoss Web Server 6.2.1 release and security update
Bulletin has no description...
OESA-2026-1607 activemq security update
The most popular and powerful open source messaging and Integration Patterns server. Security Fixes: A vulnerability classified as problematic has been found in Apache ActiveMQ Application Server Software.CWE is classifying the issue as CWE-190. The product performs a calculation that can produce...
CVE-2025-15595
Privilege escalation via dll hijacking in Inno Setup 6.2.1 and ealier versions...
EUVD-2025-208225
Privilege escalation via dll hijacking in Inno Setup 6.2.1 and ealier versions...
CVE-2025-15595 Privilege escalation via dll hijacking in Inno Setup
Privilege escalation via dll hijacking in Inno Setup 6.2.1 and ealier versions...
CVE-2026-2641
A weakness has been identified in universal-ctags ctags up to 6.2.1. The affected element is the function parseExpression/parseExprList of the file parsers/v.c of the component V Language Parser. Executing a manipulation can lead to uncontrolled recursion. It is possible to launch the attack on t...
CVE-2025-66530
Missing Authorization vulnerability in Webba Appointment Booking Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Webba Booking: from n/a through = 6.2.1...
PT-2025-49878
Name of the Vulnerable Software and Affected Versions Webba Booking versions through 6.2.1 Description A missing authorization issue exists in Webba Appointment Booking Webba Booking webba-booking-lite. The issue involves exploiting incorrectly configured access control security levels...
EUVD-2021-32639
Malicious code in bioql PyPI...
EUVD-2025-3908
Malicious code in bioql PyPI...