27802 matches found
CVE-2026-30965 Parse Server session token exfiltration via `redirectClassNameForKey` query parameter
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.5.2-alpha.8 and 8.6.21, a vulnerability in Parse Server's query handling allows an authenticated or unauthenticated attacker to exfiltrate session tokens of other users by exploiting...
CVE-2026-28292
simple-git, an interface for running git commands in any node.js application, has an issue in versions 3.15.0 through 3.32.2 that allows an attacker to bypass two prior CVE fixes CVE-2022-25860 and CVE-2022-25912 and achieve full remote code execution on the host machine. Version 3.23.0 contains ...
EUVD-2026-10791
simple-git, an interface for running git commands in any node.js application, has an issue in versions 3.15.0 through 3.32.2 that allows an attacker to bypass two prior CVE fixes CVE-2022-25860 and CVE-2022-25912 and achieve full remote code execution on the host machine. Version 3.23.0 contains ...
EUVD-2026-10743
An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed a user with read access to a repository and write access to a project to modify issue and pull request metadata through the project. When adding an item to a project that already existed, column value...
CVE-2026-3306
An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed a user with read access to a repository and write access to a project to modify issue and pull request metadata through the project. When adding an item to a project that already existed, column value...
CVE-2026-3854 Remote code execution via git push option injection in GitHub Enterprise Server
An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...
Important: Red Hat Security Advisory: Red Hat Quay 3.14.6
Red Hat Quay 3.14.6 is now available with bug fixes. Quay 3.14.6...
March 10, 2026—KB5078734 (OS Build 25398.2207)
None None...
March 10, 2026—KB5078740 (OS Build 26100.32522)
None None...
March 10, 2026—KB5078883 (OS Build 22631.6783)
None None...
March 10, 2026—KB5079473 (OS Builds 26200.8037 and 26100.8037)
None None...
March 10, 2026—KB5078766 (OS Build 20348.4893)
None None...
Important: Red Hat Security Advisory: Red Hat Quay 3.13.11
Red Hat Quay 3.13.11 is now available with bug fixes. Quay 3.13.11...
Important: Red Hat Security Advisory: git-lfs security update
An update for git-lfs is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
CVE-2025-36173 InfoSphere Data Architect (IDA) 9.2.1 Vulnerability Fixes.
Affected ProductsVersionsInfoSphere Data Architect9.2.1...
CVE-2025-36173 InfoSphere Data Architect (IDA) 9.2.1 Vulnerability Fixes.
Affected ProductsVersionsInfoSphere Data Architect9.2.1...
PT-2026-24396
Name of the Vulnerable Software and Affected Versions simple-git versions 3.15.0 through 3.32.2 Description The simple-git software, a Node.js interface for running git commands, contains an issue in which attackers can bypass previous fixes. This bypass is due to case-insensitive configuration...
PT-2026-24488
Istio is an open platform to connect, manage, and secure microservices. Prior to 1.29.1, 1.28.5, and 1.27.8, a user of Istio is impacted if the JWKS resolver becomes unavailable or the fetch fails, exposing hardcoded defaults regardless of use of the RequestAuthentication resource. This...
Unbreakable Enterprise kernel security update
6.12.0-109.67.6 - net: tunnel: make skbvlaninetprepare return drop reasons Menglong Dong Orabug: 39027305 6.12.0-109.67.5 - uek-rpm: fixed specs to explicitly call python3 as set as a requirement Mark Nicholson Orabug: 38933158 - Revert 'net/rds: fix crash by expanding kref coverage to...
