16831 matches found
PT-2026-51837
Name of the Vulnerable Software and Affected Versions Feast versions prior to 0.63.0 Description An unsafe deserialization issue exists in the registry server that allows unauthenticated or unauthorized attackers to achieve remote code execution. By sending a crafted gRPC request, an attacker can...
PT-2026-52141
Cacti is an open source performance and fault management framework. Versions 1.2.30 and prior have a Stored SQL Injection vulnerability through graph name regexp in the Reports feature. This issue has been fixed in version 1.2.31...
The vulnerability of the Shell component: the Dump and Load feature of the Oracle MySQL Shell’s command-line and code editor, which allows an intruder to gain unauthorized access to protected information.
The vulnerability of the Shell component: The “Dump and Load” feature of the Oracle MySQL Shell command-line and code editor interface is related to the manipulation of inter-site queries. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protect...
IBM WebSphere Application Server Liberty 17.0.0.3 < 26.0.0.7 (7277536)
The version of IBM WebSphere Application Server Liberty running on the remote host is affected by a vulnerability as referenced in the 7277536 advisory. - IBM WebSphere Application Server Liberty is affected by an arbitrary file read vulnerability with the restConnector-2.0 feature enabled. CWE:...
CVE-2026-54516
jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.21.0 until 2.21.4 and 3.1.4, POJOPropertiesCollector.renameProperties allows a property with @JsonProperty"renamed" on the getter and @JsonIgnore on the setter to be renamed...
CVE-2026-41579 vulnerabilities
Vulnerabilities for packages: podman, rancher-agent, falco-no-driver, k8s-device-plugin-fips, k8s-device-plugin, cadvisor-fips, prometheus-podman-exporter, cadvisor, podman-fips, buildah-fips, rancher, node-feature-discovery-fips, sriov-network-device-plugin, sriov-network-device-plugin-fips,...
GHSA-XJVP-4FHW-GC47 vulnerabilities
Vulnerabilities for packages: podman, rancher-agent, falco-no-driver, k8s-device-plugin-fips, k8s-device-plugin, cadvisor-fips, prometheus-podman-exporter, cadvisor, podman-fips, buildah-fips, rancher, node-feature-discovery-fips, sriov-network-device-plugin, sriov-network-device-plugin-fips,...
GHSA-XJVP-4FHW-GC47 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, node-feature-discovery, falco-no-driver, k8s-device-plugin, sriov-network-device-plugin, buildah, nvidia-container-toolkit, podman, cadvisor...
CVE-2026-41579 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-harvester, node-feature-discovery, falco-no-driver, k8s-device-plugin, sriov-network-device-plugin, buildah, nvidia-container-toolkit, podman, cadvisor...
3 Paths to Upgrade Windows 11 before 24H2 End of Servicing (EOL)
Key Takeaways Windows 11 24H2 reaches the end of servicing on October 13, 2026, making timely enterprise upgrades critical. Enterprises often face version drift, with multiple Windows 11 builds across endpoints requiring different upgrade paths. Upgrade approaches vary based on system state and m...
PT-2026-51599
Name of the Vulnerable Software and Affected Versions jackson-databind versions 2.21.0 through 2.21.3 jackson-databind versions 3.0.0 through 3.1.3 Description An issue exists in the POJOPropertiesCollector. renameProperties function where a property with @JsonProperty"renamed" on the getter and...
A Hybrid CNN-LSTM Intrusion Detection Framework for Cybersecurity in Smart Renewable Energy Grids
The accelerated digitalization of renewable energy smart grids through IoT sensors, AMI, and SCADA systems has significantly expanded the attack surface for sophisticated cyberattacks, FDI attacks that stealthily distort state estimation and DoS/DDoS attacks that flood communication channels...
CVE-2026-56340 vLLM - Denial of Service via Unvalidated Multimodal Embeddings
vLLM versions = 0.10.2 and 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default, an attacker can submit crafted embedding requests with malformed negative or out-of-bounds tensor indices, when the...
CVE-2026-48939 Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15
A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution...
CVE-2026-48939 Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15
A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution...
PT-2026-51172
Name of the Vulnerable Software and Affected Versions vLLM versions 0.10.2 through 0.12.x Description Multimodal embeddings processing lacks sparse tensor validation. Since PyTorch disables sparse tensor invariant checks by default, an attacker can submit crafted embedding requests containing...
CVE-2026-50519 Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability
...
CVE-2026-48787
CVE-2026-48787 affects gin-vue-admin (AI-assisted basic development platform) in version 2.9.1. An authenticated attacker with access to the code-generation feature and MCP management interface can inject attacker-controlled Go source code via POST /autoCode/addFunc, then trigger a rebuild of the...
EUVD-2026-38077
gin-vue-admin is an AI-assisted basic development platform. In version 2.9.1, an authenticated attacker with access to the code-generation feature and MCP management interface can exploit this vulnerability by injecting attacker-controlled Go source code through POST /autoCode/addFunc, and then...