12871 matches found
IBM Cloud APM 安全漏洞
IBM Cloud APM is an application performance monitoring and operations analysis platform provided by the American multinational company IBM. There are security vulnerabilities in the IBM Cloud APM Base Private 8.1.4 version and the IBM Cloud APM Advanced Private 8.1.4 version. These vulnerabilitie...
IBM MQ Operator和IBM supplied MQ Advanced container images 日志信息泄露漏洞
IBM MQ Operator and IBM supplied MQ Advanced container images are products of International Business Machines Corporation IBM. IBM MQ Operator is a tool used to manage the lifecycle of IBM MQ queue managers. IBM supplied MQ Advanced container images are Docker/OCI container images. Both IBM MQ...
CVE-2026-49044: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Justin Kruit Advanced Custom Fields: Font Awesome Field allows Stored XSS. This issue affects Advanced Custom Fields: Font Awesome Field: from n/a through 5.0.2...
CVE-2026-42739: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in IniLerm Advanced IP Blocker advanced-ip-blocker allows DOM-Based XSS.This issue affects Advanced IP Blocker: from n/a through = 8.10.7...
WordPress plugin Advanced IP Blocker 跨站脚本漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...
PT-2026-43817
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the starfive aes aead do one req function. The function allocates rctx-adata using kzalloc, but fails to release this memory if the sg copy to buffer or starfive...
CVE-2026-6565: Improper Neutralization of Input During Web Page Generation
The Style Kits – Advanced Theme Styles for Elementor, Elementor Kits & Elementor Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '/wp-json/agwp/v1/tokens/save' endpoint kit title parameter in versions up to, and including, 2.5.0 due to insufficient input...
PT-2026-43651
Name of the Vulnerable Software and Affected Versions Advanced IP Blocker versions prior to 8.10.8 Description Improper neutralization of input during web page generation allows DOM-Based Cross-site Scripting XSS, a flaw where the application contains client-side JavaScript that processes data fr...
PT-2026-43859
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the ALSA caiaq component. The error handling path for the setup card function fails to kill the internal URB cdev-ep1 in urb if it was submitted before the error...
Important: Red Hat Security Advisory: RHACS 4.9.7 security and bug fix update
Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...
autotrain-advanced (>=0.6.95, <=0.7.1), dialogy (>=0.10.4, <=2.2.5) +10 more potentially affected by CVE-2026-4372 via transformers (4.38.0)
transformers PYPI version 4.38.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.6.95, =0.10.4, =1.7.0, =0.0.1, =0.10.9, =0.1.0, =0.1.17, =0.1.20 - profanity-sanitizer 0.1.4 - team-comm-tools...
autotrain-advanced (>=0.6.52, <=0.6.80), bicleaner-ai (>=3.0.1, <=3.2.1) +5 more potentially affected by CVE-2026-4372 via transformers (4.36.1)
transformers PYPI version 4.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.6.52, =3.0.1, =0.1.4, =0.0.2, =0.0.12 Source cves: CVE-2026-4372 Source advisory: OSV:GHSA-29PF-2H5F-8G72...
algorin-cli (>=0.0.1, <=0.21.0), autotrain-advanced (>=0.7.2, <=0.7.7) +8 more potentially affected by CVE-2026-4372 via transformers (4.38.1)
transformers PYPI version 4.38.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - algorin-cli =0.0.1, =0.7.2, =0.1.0, =0.0.92, =0.2.5, =2.0.0a12, =0.1.0, =0.1.4 Source cves: CVE-2026-4372 Source advisory:...
autotrain-advanced (0.8.6), swiftannotate (0.1.0) potentially affected by CVE-2026-4372 via transformers (4.43.0)
transformers PYPI version 4.43.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced 0.8.6 - swiftannotate 0.1.0 Source cves: CVE-2026-4372 Source advisory: OSV:GHSA-29PF-2H5F-8G72...
autotrain-advanced (>=0.8.21, <=0.8.25), cehrbert (1.5.0) +1 more potentially affected by CVE-2026-4372 via transformers (4.45.0)
transformers PYPI version 4.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.21, =0.0.13, =0.1.1 Source cves: CVE-2026-4372 Source advisory: OSV:GHSA-29PF-2H5F-8G72...
autotrain-advanced (>=0.8.2, <=0.8.5), nltkor (>=1.2.8, <=1.2.24) potentially affected by CVE-2026-4372 via transformers (4.42.2)
transformers PYPI version 4.42.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - autotrain-advanced =0.8.2, =1.2.8, =1.2.24 Source cves: CVE-2026-4372 Source advisory: OSV:GHSA-29PF-2H5F-8G72...
antimatter (0.1.3), autotrain-advanced (>=0.6.42, <=0.6.44) +12 more potentially affected by CVE-2026-4372 via transformers (4.34.1)
transformers PYPI version 4.34.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - antimatter 0.1.3 - autotrain-advanced =0.6.42, =4.3.0, =1.22.0rc1, =1.0.1, =0.1.69, =0.1.73 - spacy-transformers 1.3.2 Source cves:...
anyclassifier (>=0.1.1, <=0.2.0), autotrain-advanced (>=0.7.30, <=0.7.43) +3 more potentially affected by CVE-2026-4372 via transformers (4.39.0)
transformers PYPI version 4.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - anyclassifier =0.1.1, =0.7.30, =0.1.3, =0.2.3, =0.2.4 Source cves: CVE-2026-4372 Source advisory: OSV:GHSA-29PF-2H5F-8G72...
Important: Red Hat Security Advisory: RHACS 4.10.3 security and bug fix update
Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...
CVE-2026-9432 Totolink A8000RU Web Management cstecgi.cgi setWiFiAdvancedCfg os command injection
A security flaw has been discovered in Totolink A8000RU 7.1cu.643b20200521. This vulnerability affects the function setWiFiAdvancedCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. The manipulation of the argument bgProtection results in os command injection. The...