452646 matches found
CVE-2026-87679
When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...
EUVD-2026-94657
Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads such as device configuration attributes or port mapping requests the REST API service fails to properly validate...
CVE-2026-87683
Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads such as device configuration attributes or port mapping requests the REST API service fails to properly validate...
CVE-2026-87683
Brocade Fabric OS versions prior to 10.0.1 are susceptible to multiple stack-based buffer overflow vulnerabilities within the REST API management component . The root cause is a failure to properly validate incoming array counts and string lengths against internal buffer capacities when processin...
CVE-2026-87683
Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads such as device configuration attributes or port mapping requests the REST API service fails to properly validate...
CLEANSTART-2026-JU40621 attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container
Security vulnerability affects the apache-hive package. An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container...
CVE-2026-87680
A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters...
EUVD-2026-94654
A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters...
CVE-2026-87680
A command injection vulnerability in the REST API management interface of Brocade Fabric OS versions before 10.0.1 allows an authenticated user to execute arbitrary system commands via crafted input parameters...
CLEANSTART-2026-KI93866 brace-expansion library generates arbitrary strings containing a common prefix and suffix
CVE-2026-102278 affects multiple packages. The brace-expansion library generates arbitrary strings containing a common prefix and suffix. See references for individual vulnerability details...
CLEANSTART-2026-MC48922 brace-expansion library generates arbitrary strings containing a common prefix and suffix
CVE-2026-102276 affects multiple packages. The brace-expansion library generates arbitrary strings containing a common prefix and suffix. See references for individual vulnerability details...
CLEANSTART-2026-ME50166 brace-expansion library generates arbitrary strings containing a common prefix and suffix
CVE-2026-102277 affects multiple packages. The brace-expansion library generates arbitrary strings containing a common prefix and suffix. See references for individual vulnerability details...
EUVD-2026-94653
When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...
CVE-2026-87679
When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...
CVE-2026-87679
When Brocade Fabric OS versions before 10.0.1 processes trunk configuration operations, the application parses user-supplied list strings into dynamically allocated heap arrays without enforcing boundary checks on the maximum allowable number of elements. An authenticated administrator can exploi...
CLEANSTART-2026-ZT93395 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
CVE-2026-56864 affects multiple packages. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
EUVD-2026-94646
Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...
PT-2026-107776
A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...
PT-2026-107868
Argument injection in WP Toolkit for cPanel allows local users to execute arbitrary code as other accounts on the same server...
PT-2026-108175
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection versions 12.0 through 12.1 Description A heap-based buffer overflow exists in the S-TAP TrafficTap TDS login reassembly functionality. An unauthenticated remote attacker can send crafted TDS login fragments that...