175271 matches found
ROS-20260813-73-0029
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260813-73-0010
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
ROS-20260813-73-0012
The vulnerability in Gitea is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
Debian dsa-6438 : libecpg-compat3 - security update
The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6438 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6438-1 [email protected] https://www.debian.org/securit...
Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.5.1.10)
The version of AOS installed on the remote host is prior to 7.5.1.10. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.5.1.10 advisory. - A flaw was found in gnutls. Servers configured with RSA-PSK RivestShamirAdleman Pre-Shared Key wrongfully matched usernam...
PT-2026-71926
Name of the Vulnerable Software and Affected Versions OpenChoreo versions prior to 1.0.2 OpenChoreo versions prior to 1.1.2 Description Management APIs served by internal/cluster-gateway/server.go on the externally reachable agent listener lack authentication. This allows network-reachable...
PT-2026-71726
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Remote attackers can bypass security restrictions because the system does not properly validate client-asserted identity. Recommendations At the moment, there is no information about a newer version...
PT-2026-71512
Unauthenticated Bypass Vulnerability in Headless Single Sign On = 1.6 versions...
PT-2026-71911
Budibase versions before 3.40.0 contain an authorization/authentication bypass in the PUT /api/global/users/tenant/owner changeTenantOwnerEmail endpoint. On self-hosted instances SELF HOSTED or DISABLE ACCOUNT PORTAL set, the cloudRestricted middleware is a no-op and the route is protected only b...
PT-2026-71882
FreePBX is an open source IP PBX. Prior to 16.0.47 and 17.0.30, the FreePBX Framework module permits a crafted backup to restore the hidden AUTHTYPE setting with the value none through runRestore in amp conf/htdocs/admin/libraries/Builtin/Restore.php. An authenticated user with sufficient...
iscsi-initiator-utils security, bug fix, and enhancement update
6.2.1.11-1.git4b3e853.0.1.el98.2 - iscsi validate interface IP against target address family Orabug: 39491394 - iscsi delay reconnect until interface has valid IP Orabug: 38441836 - Correct the typos in email addresses in changelog in OL9.5 Orabug: 37910459 - Change the order of restart iscsi...
PT-2026-71887
OpenChoreo is a developer platform for Kubernetes. Prior to 1.0.4, 1.1.4, and 1.2.1, the OpenChoreo Backstage backend hardcoded backend.auth.dangerouslyDisableDefaultAuthPolicy and auth.providers.guest.dangerouslyAllowOutsideDevelopment to true, exposing /api/ without authentication and allowing...
PT-2026-71529
Unauthenticated Broken Authentication in Log in with Google = 1.4.2 versions...
PT-2026-71841
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication...
PT-2026-71842
Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authentication may allow a remote attacker to execute arbitrary code or obtain sensitive information. Recommendations At the moment, there is no information about a newer version that contain...
PT-2026-71883
FreePBX is an open source IP PBX. From 17.0.1 until 17.0.7, the FreePBX Music on Hold module permits dangerous command-line options for /usr/bin/mpg123 and other allowed players in validateCustomConfiguration in Music.class.php. An authenticated administrator can use options that write files, ope...
PT-2026-71832
Name of the Vulnerable Software and Affected Versions Trigger.dev versions prior to 4.5.2 Description Trigger.dev is a platform for building and deploying fully managed AI agents and workflows. The addGoogleStrategy function in apps/webapp/app/services/googleAuth.server.ts passes a Google profile...
PT-2026-71814
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation...