27844 matches found
[SECURITY] Fedora 44 Update: nodejs24-24.18.0-1.fc44
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...
PT-2026-66534
IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 is vulnerable to buffer overflow in setgid helper db2flacc...
PT-2026-66513
Name of the Vulnerable Software and Affected Versions Apache JSPWiki versions prior to 2.12.4 Description A lack of checks in the UserManager allows for impersonation, which may enable attackers to escalate privileges. Recommendations Upgrade to version 2.12.4 or newer...
PT-2026-66512
Name of the Vulnerable Software and Affected Versions Apache JSPWiki versions prior to 2.12.4 Description Debug messages reveal unnecessary information, which could potentially expose sensitive system details. Recommendations Upgrade to version 2.12.4...
Fedora 44 : valkey (2026-3d18a65cc4)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3d18a65cc4 advisory. Valkey 9.0.5 - Released Tue 21 July 2026 Upgrade urgency SECURITY: This release includes security fixes we recommend you apply as soon as possible...
PT-2026-66407
Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.x Description A flaw in the Permission Model enforcement allows the trace events.createTracing.enable function to write trace logs outside the boundaries defined by the...
PT-2026-66558
Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description An unauthenticated remote code execution issue exists in the '/load lora adapter from tensors' endpoint. This occurs due to a bypass of the SafeUnpickler's incomplete denylist, which allows an...
Linux Distros Unpatched Vulnerability : CVE-2026-56847
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in Node.js Permission Model enforcement allows traceevents.createTracing.enable Writes Trace Logs Outside --allow-fs-write. This can lead to...
PT-2026-66612
Name of the Vulnerable Software and Affected Versions Kamaji versions prior to 26.7.4-edge Description The PostgreSQL and MySQL datastore drivers build Data Definition Language DDL statements by interpolating user-supplied DataStoreUsername and DataStoreSchema directly into SQL using fmt.Sprintf...
PT-2026-66448
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the custom attributes function...
PT-2026-66408
Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.x Description A flaw in the Node.js HTTPS Agent connection reuse mechanism can lead to PFX object-array key collisions. This issue allows mutual TLS mTLS client identities to be...
Fedora 44 : unbound (2026-e495bd59ef)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e495bd59ef advisory. Update to 1.25.2 rhbz2506061 Security fixes: - Fix CVE-2026-14586, Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC...
CVE-2025-65340
kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php...
CVE-2026-59919
Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...
EUVD-2026-50443
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpContentEncoder the superclass of the production handler HttpContentCompressor maintains a per-channel ArrayDeque named acceptEncodingQueue that accumulates attacker-controll...
CVE-2026-64282
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for arm64 architectures. A race condition between the kvmtranslatevncr function and an MMU Memory Management Unit notifier can lead to a Page Frame Number PFN leak. This occurs because an early return in kvmtranslatevncr fail...
CVE-2026-54735
Prebid Server is an open-source solution for running real-time advertising auctions in the cloud. Prior to version 4.4.0, certain bidder adapters in Prebid Server interpolate user-supplied parameters into outbound request URLs without properly validating host and subdomain values, allowing crafte...
CVE-2026-54735 prebid-server's request forgery vulnerability allows for possible host environment data extraction
Prebid Server is an open-source solution for running real-time advertising auctions in the cloud. Prior to version 4.4.0, certain bidder adapters in Prebid Server interpolate user-supplied parameters into outbound request URLs without properly validating host and subdomain values, allowing crafte...
Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: ruby4.0: ruby4.0-4.0.6-37.1.hum1 aarch64, x8664 ruby4.0-bundled-gems-4.0.6-37.1.hum1 aarch64, x8664 ruby4.0-default-gems-4.0.6-37.1.hum1 noarch ruby4.0-devel-4.0.6-37.1.hum1 aarch64, x8664...