Allocation of Resources Without Limits or Throttling

Overview apache/thrift is an Apache Thrift RPC system Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the processing of skipped fields in incoming messages due to a failure to enforce recursion limits. An attacker can cause stack...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write through the THeaderTransport. An attacker can cause an application crash by sending specially crafted network traffic that triggers an out-of-bounds memory write. Remediation Upgrade thrift to version 0.25.0 or highe...

Improper Handling of Length Parameter Inconsistency

Overview apache/thrift is an Apache Thrift RPC system Affected versions of this package are vulnerable to Improper Handling of Length Parameter Inconsistency via improper message handling in language bindings. An attacker can cause application crashes or excessive resource consumption by sending...

Improper Handling of Length Parameter Inconsistency

Overview Affected versions of this package are vulnerable to Improper Handling of Length Parameter Inconsistency via improper message handling in language bindings. An attacker can cause application crashes or excessive resource consumption by sending specially crafted requests. Remediation Upgra...

Security Bulletin: A Vulnerability in IBM WebSphere Application Server shipped with IBM Tivoli Netcool/OMNIbus WebGUI - July 2026 Java CPU (CVE-2026-16440)

Summary WebSphere Application Server WAS is shipped as a component of IBM Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes sectio...

Security Bulletin: Multiple security vulnerabilities has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Netcool/OMNIbus WebGUI - August 2026 Java CPU

Summary WebSphere Application Server WAS is shipped as a component of IBM Tivoli Netcool/OMNIbus WebGUI. Information about security vulnerabilities affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes sectio...

ROS-20261002-73-0140

The vulnerability in Jetty is related to incorrect data encoding according to the Punycode standard. Exploiting this vulnerability can allow a remote attacker to cause failures in the web application...

CVE-2026-103956: Missing Authentication for Critical Function

Missing authentication for critical function in the authentication dependency in Loom for AWS before 1.6.1 allowed remote actors to obtain super-admin authority over the agent control plane, including registering tool servers, reading stored integration credentials, and rewriting the IAM role...

PT-2026-104417

Name of the Vulnerable Software and Affected Versions Loom for AWS versions prior to 1.6.1 Description A missing authentication for a critical function in the authentication dependency allows remote actors to obtain super-admin authority over the agent control plane. This occurs in deployments...

CVE-2026-93832

A Motorola system application component was exported without permission , creating a security flaw that allows for the revocation of runtime permissions from other applications. The vulnerability is associated with CWE-862 (Missing Authorization) . No specific affected versions or remediation ste...

EUVD-2026-91031

A component of one of the Motorola system applications was exported without permission, allowing for the revocation of runtime permissions from other apps...

EUVD-2026-90366

pypdf: Possible long runtimes/large memory usage when parsing indirect objects...

CVE-2026-103244

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to plant admin users and forged session...

Security Bulletin: IBM Maximo Application Suite uses third party libraries which is vulnerable to multiple cves.

Summary IBM Maximo Application Suite uses busboy 3.2.0, cryptography 46.0.7, browserslist 4.24.4, form-data 2.5.5, brace-expansion 1.1.14, socket.io-parser 4.2.6, fast-xml-parser 5.9.3, immutable 5.1.5, postcss 8.5.15, libarchive 3.5.3-9.el97, dompurify 3.4.0, ip-address 10.1.1, fast-uri 3.1.2,...

CVE-2026-103244 ground-station before 0.8.0 Authentication Bypass via setup.restore

ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.restore command that allows unauthenticated attackers to execute arbitrary SQL during first-run setup mode. Attackers can invoke setup.restore via Socket.IO to plant admin users and forged session...

Exploit for Improper Input Validation in Citrix Netscaler_Application_Delivery_Controller

pitscaler.com Static briefing served by the Cloudflare Worker...

Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite uses jackson-databind-2.18.9.jar and httpclient5-5.3.1.jar and is vulnerable to CVE-2026-19032, CVE-2026-83557, CVE-2026-68497 and CVE-2026-64607

Summary IBM Maximo Manage application in IBM Maximo Application Suite uses jackson-databind-2.18.9.jar and httpclient5-5.3.1.jar and is vulnerable to CVE-2026-19032, CVE-2026-83557, CVE-2026-68497 and CVE-2026-64607. This bulletin contains information regarding these vulnerabilities and their...

Security Bulletin: IBM Maximo Manage application in IBM Maximo Application Suite is vulnerable to multiple vulnerabilities

Summary IBM Maximo Manage application in IBM Maximo Application Suite uses uses httpcore5-h2-5.2.4.jar, browserslist-4.23.0.tgz, baseline-browser-mapping-2.10.13.tgz, fast-uri-3.1.5.tgz and fast-uri-3.1.6.tgz and is vulnerable to CVE-2026-54428, CVE-2026-54399, CVE-2026-73088, CVE-2026-45819,...

Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses nanoid-3.3.12.tgz and dompurify-3.4.12.tgz which are vulnerable to CVE-2026-67213, CVE-2026-67214 and CVE-2026-75838

Summary IBM Maximo Application Suite - Cluster Performance Insights uses nanoid-3.3.12.tgz and dompurify-3.4.12.tgz which are vulnerable to CVE-2026-67213, CVE-2026-67214 and CVE-2026-75838. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Detai...

Security Bulletin: Due to use of WebSphere Application Server - Liberty, IBM Cloud Pak System is affected by multiple vulnerabilities.

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-11541 DESCRIPTION: IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Serv...