Medium: mariadb118

Issue Overview: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability...

Medium: mariadb123

Issue Overview: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Replication. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability...

PT-2026-120385

Уязвимость утилиты freerdp-shadow-cli RDP-клиента FreeRDP связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

ALSA-2026:80798 Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc: Fi...

PT-2026-121733

Heap buffer overflow in ntfs acl owner Heap buffer overflow in ntfs same sid Denial-of-service in ntfs inode attach all extents Heap buffer overflow in ntfs check restart area Heap buffer overflow in ntfs ea check wsldev Heap buffer overflow in ntfs external attr find Heap data corruption in ntfs...

PT-2026-110591

Name of the Vulnerable Software and Affected Versions LogicalDOC Community Edition versions prior to 9.4 Description An unauthenticated file upload issue exists in the UploadServlet that allows remote attackers to write files to the disk without an active session. By sending repeated multipart...

Medium: perl-Storable

Issue Overview: Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads a signed 32-bit item count from an SXHOOK record and calls avextend with that count plus one. A count of I32MAX wraps the addition to a negati...

PT-2026-111097

Name of the Vulnerable Software and Affected Versions IBM Aspera Enterprise WebApps versions 1.0.0 through 1.0.6 Description A remote attacker can cause a denial of service by triggering uncontrolled resource consumption. Recommendations At the moment, there is no information about a newer versio...

PT-2026-111101

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description A path traversal issue allows a remote authenticated attacker to cause a denial of service. Path traversal is a flaw that allows an attacker to access files and directories that a...

PT-2026-110780

Name of the Vulnerable Software and Affected Versions ZcashFoundation Zebra versions 6.4.0 through 6.4.1 Description The software incorrectly parses version 6 transactions that carry a pre-NU6.3 consensus branch ID. During the construction of UnminedTx, the size computation assumes that the...

PT-2026-110782

Name of the Vulnerable Software and Affected Versions Zebra versions prior to 6.4.0 Description An uncontrolled resource consumption issue allows unauthenticated peers to force full proof verification by serving forged block bodies that possess valid header hashes. By flipping authorizing-only...

PT-2026-110897

Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.5 Description Improper input validation may allow a local attacker to cause a denial of service. Recommendations At the moment, there is no information about a newer...

PT-2026-110955

🚨 CVE-2026-96261 IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boo...

PT-2026-110991

IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper handling of malformed frames, resulting in termination of the host process...

PT-2026-110992

Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite - IoT Component version 9.0.0 IBM Maximo Application Suite - IoT Component version 9.1.0 IBM Maximo Application Suite - IoT Component version 9.2.0 Description A remote attacker can cause a denial of service throug...

PT-2026-110986

Name of the Vulnerable Software and Affected Versions odhcpd versions prior to commit cfddd56 Description An unauthenticated host on the same link can disrupt the DHCPv6 service by sending a crafted RENEW request containing multiple IA NA options after obtaining two bindings. This process trigger...

PT-2026-110988

Name of the Vulnerable Software and Affected Versions IBM Maximo AI Service version 9.1.0 IBM Maximo AI Service version 9.2.0 Description A remote attacker can cause a denial of service by triggering uncontrolled resource consumption. Recommendations At the moment, there is no information about a...

PT-2026-110989

Name of the Vulnerable Software and Affected Versions IBM Maximo AI Service version 9.1.0 IBM Maximo AI Service version 9.2.0 SaaS Description A remote attacker could cause a denial of service due to uncontrolled recursion, which occurs when a function calls itself repeatedly without a proper...

PT-2026-110657

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.11.0 through 3.32.0 Description A reachable assertion issue exists in the urb isoch transfer function. A malicious RDP server can cause the client to crash by sending unvalidated OutputBufferSize values. Specifically, an...

PT-2026-110666

FreeRDP 3.0.0 before 3.32.0 contains a heap out-of-bounds read in freerdp assistance parse all elements of because it advances its parsing cursor without reducing the remaining length, letting the scan window exceed the decrypted ConnectionString2 buffer. Attackers can supply a crafted...