CVE-2025-26790

Withsecure Atlant with the Capricorn engine, in versions prior to 2025-01-20_02 , is vulnerable to a remote denial of service caused by an out-of-bounds memory read during processing of a document file by the antivirus engine. The CVSS 3.1 score is 3.7 (Low) with a vector of AV:N/AC:H/PR:N/UI:N/S...

PT-2026-91755

Flowable flowable-engine through 8.0.0 contains an XML external entity injection vulnerability in ProcessDiagramLayoutFactory.parseXml that fails to disable external entity resolution when parsing deployed BPMN resources. Attackers with process deployment privileges can embed DOCTYPE declarations...

CVE-2026-16428: Improper Control of Generation of Code

IBM DataStage on Cloud Pak for Data 5.4.0.0 IBM DataStage could allow a remote authenticated attacker to execute arbitrary code due to improper configuration of the XSLT transformation engine...

CVE-2025-26790

Withsecure Atlant with Capricorn engine before 2025-01-2002 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by the antivirus engine...

EUVD-2025-210907

Withsecure Atlant with Capricorn engine before 2025-01-2002 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by the antivirus engine...

CVE-2025-26790

Withsecure Atlant with Capricorn engine before 2025-01-2002 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by the antivirus engine...

PT-2026-91056

Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah bgd buffer overflow via ah event send...

CVE-2025-26790: Out-of-bounds Read

Withsecure Atlant with Capricorn engine before 2025-01-2002 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by the antivirus engine...

CVE-2023-46273

Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ahbgd buffer overflow via aheventsend...

PT-2026-91065

Withsecure Atlant with Capricorn engine before 2025-01-20 02 allows a Remote Denial of Service via an out-of-bounds memory read during processing of a document file by the antivirus engine...

CVE-2026-50006: Improper Limitation of a Pathname to a Restricted Directory

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server forwards unauthenticated SQL from its MySQL-compatible server port to SQLite without restricting ATTACH DATABASE filesystem targets. A remote attacker can select any path writable by the Anyquery server proces...

EUVD-2023-60670

Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ahbgd buffer overflow via aheventsend...

CVE-2023-46273: Stack-based Buffer Overflow

Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ahbgd buffer overflow via aheventsend...

CVE-2023-46273

Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ahbgd buffer overflow via aheventsend...

CVE-2023-46273

Bonjour Gateway in Extreme Networks IQ Engine is affected by a buffer overflow in the ah_bgd function via ah_event_send. The vulnerability affects versions before 10.6r1a and 10.6r4 before 10.6r5 . The CVSS 3.1 score is 8.8 (HIGH) , with a network attack vector, low complexity, low privileges req...

CVE-2026-91197: Improper Restriction of XML External Entity Reference

Flowable flowable-engine through 8.0.0 contains an XML external entity injection vulnerability in ProcessDiagramLayoutFactory.parseXml that fails to disable external entity resolution when parsing deployed BPMN resources. Attackers with process deployment privileges can embed DOCTYPE declarations...

PT-2026-91424

Name of the Vulnerable Software and Affected Versions IBM DataStage on Cloud Pak for Data version 5.4.0.0 Description An improper configuration of the XSLT Extensible Stylesheet Language Transformations transformation engine allows a remote authenticated attacker to execute arbitrary code...

Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Adobe Commerce

StyleSmuggler HTTP PoC Private research repository for the HT...

[SECURITY] [DSA 6496-1] nginx security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6496-1 [email protected] https://www.debian.org/security/ Aron Xu September 12, 2026 https://www.debian.org/security/faq -...

Debian dsa-6496 : libnginx-mod-http-geoip - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6496 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6496-1 [email protected] https://www.debian.org/securit...