388863 matches found
CLEANSTART-2026-NQ89106 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
CVE-2026-54515 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...
CLEANSTART-2026-OJ07374 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the strimzi-kafka-operator package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-OG12992 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the strimzi-kafka-operator package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-ED66251 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the strimzi-kafka-operator package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-AS15122 Using untrusted, non-normalized input as-is for metrics data (such as metric names, tag keys, or tag values) is a dangerous antipattern that general-purpose instrumentation should never perform
Security vulnerability affects the strimzi-kafka-operator package. Using untrusted, non-normalized input as-is for metrics data such as metric names, tag keys, or tag values is a dangerous antipattern that general-purpose instrumentation should never perform...
CLEANSTART-2026-WG41098 temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com
Security vulnerability affects the strimzi-kafka-operator package. A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com...
kernel: net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry
A flaw was found in the Linux kernel's Server Message Block over Remote Direct Memory Access SMC-Rv2 protocol implementation. The smcllcrmtdeleterkey and smcllcsaveaddlinkrkeys functions incorrectly handle oversized LLC messages, reading beyond the intended message boundaries. This can lead to th...
EUVD-2026-101736
n8n before 1.123.83 contains an authorization bypass vulnerability that allows authenticated members to spoof workflow identity by supplying a trusted identifier in Execute Sub-workflow inline JSON mode. Attackers can set this identifier to resolve credentials from projects they do not belong to...
python36:3.6 security update
An update is available for module.python-docs, python-virtualenv, module.python-pymongo, python36, python-pygments, module.python-wheel, module.python-virtualenv, python-sqlalchemy, module.python-nose, python-docutils, python-wheel, python-nose, module.python-sqlalchemy, python-distro, scipy,...
RLSA-2026:82858 Important: python36:3.6 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...
CVE-2026-110934: Improper Validation of Array Index
Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation. This issue affects Vyond: before be6e297b0c4836e20d73b2f8a40a561ea496ebaa...
PT-2026-114997
Name of the Vulnerable Software and Affected Versions OPNsense versions prior to 26.1.11 Description The OpenVPN connection-status dashboard widget in src/opnsense/www/js/widgets/OpenVPNClients.js and the connection-status view fail to apply quote-safe encoding to the common name of a client when...
UBUNTU-CVE-2026-93484
Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or...
CVE-2026-93484
Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper sanitization or the use of parameterized queries allows an attacker to inject arbitrary SQL commands, leading to data theft, modification, or...
Linux Distros Unpatched Vulnerability : CVE-2026-93484
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement. This lack of proper...
Linux Distros Unpatched Vulnerability : CVE-2026-88842
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in BusyBox dpkg. The writestatusfile function does not reset a field cursor between package stanzas. When two packages are removed in a single...
Important: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and...
ALSA-2026:83551 Important: ghostscript security update
The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: ghostscript: -dSAFER sandbox bypass via Type 5 shading OOB write and...
UBUNTU-CVE-2026-105274
Improper Handling of Highly Compressed Data Data Amplification vulnerability in hexpm hexcore allows an untrusted repository mirror, or a server answering hexcore's API requests, to exhaust the memory of the Erlang VM running hexcore. The same code is vendored in Hex mixhexrepo, mixhexapi and...
PT-2026-115277
Name of the Vulnerable Software and Affected Versions JobOps versions prior to 0.13.2 Description A server-side request forgery SSRF issue exists in the 'POST /api/manual-jobs/fetch' endpoint. This allows authenticated users, or unauthenticated clients when the system is in demo mode, to force th...