151281 matches found
PT-2026-59559
Summary Type: Insecure Direct Object Reference. The GET /workspaces/workspace id/issues/issue id/activity endpoint is gated by require workspace memberworkspace id and dispatches to ActivityService.list for issueissue id, which executes SELECT FROM activity WHERE issue id = :issue id with no...
PT-2026-59905
Impact When converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process. python import tensorflow as tf class QuantConv2DTransposedtf.keras.layers.Layer: def buildself, input shape: self.kernel = self.add weight"kernel", 3, 3,...
Important: maven:3.9 security update
Maven is a software project management and comprehension tool. Based on the concept of a project object model POM, Maven can manage a project's build, reporting and documentation from a central piece of information. Security Fixes: org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Travers...
Linux Distros Unpatched Vulnerability : CVE-2026-57216
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, AMQP 0-9-1, AMQP 1.0, and Stream Protocol authentication can allow a...
The vulnerability of the gnutls_x509_crt_check_hostname2() function in the lib/x509/hostname-verify.c file, lines 111,245–265, of the GnuTLS cryptographic library allows a attacker to replace the server and gain unauthorized access to protected information.
The vulnerability of the gnutlsx509crtcheckhostname2 function in the lib/x509/hostname-verify.c file at line 111,245-265 of the GnuTLS cryptographic library is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to replace the server and...
The vulnerability of the queueattrstore() function in the block/blk-sysfs.c module, which supports the block-level kernel in the Linux operating system, allows a attacker to cause a service failure.
The vulnerability of the queueattrstore function in the block/blk-sysfs.c module, which supports the block-level kernel in the Linux operating system, is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause service failures...
The vulnerability of the Request.post() function in the aiohttp HTTP client allows a attacker to trigger a service failure.
The vulnerability of the Request.post function in the aiohttp HTTP client is related to unlimited resource distribution or throttling. Exploiting this vulnerability could allow a remote attacker to cause service failures...
RHEL 9 : compat-openssl11 (RHSA-2026:39012)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:39012 advisory. The OpenSSL toolkit provides support for secure communications between machines. This version of OpenSSL package contains only the librarie...
RHEL 9 : freeipmi (RHSA-2026:39006)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:39006 advisory. The freeipmi packages contain an Intelligent Platform Management Interface IPMI remote console and system management software based on the...
PT-2026-59903
Impact When running on GPU, tf.image.generate bounding box proposals receives a scores input that must be of rank 4 but is not checked. python import tensorflow as tf a = tf.constantvalue=1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0 b = tf.constantvalue=1 tf.image.generate bounding box...
PT-2026-59141
While testing the OAuth Proxy implementation, it was noticed that the server does not properly respect the resource parameter submitted by the client in the authorization and token request. Instead of issuing the token explicitly for this MCP server, the token is issued for the base url passed to...
Security update for dash (moderate)
openSUSE security update: security update for dash ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21301-1 Rating: moderate References: bsc1178978 bsc1269494 Cross-References: CVE-2026-31323 CVSS scores: CVE-2026-31323 SUSE : 4...
PT-2026-59748
Impact When running with XLA, tf.raw ops.Bincount segfaults when given a parameter weights that is neither the same shape as parameter arr nor a length-0 tensor. python import tensorflow as tf func = tf.raw ops.Bincount para='arr': 6, 'size': 804, 'weights': 52, 351 @tf.functionjit compile=True d...
RHEL 7 : firefox (RHSA-2026:38506)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:38506 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...
AlmaLinux 9 : podman (ALSA-2026:37123)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:37123 advisory. golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate CVE-2026-39835 golang.org/x/crypto/ssh:...
BIT-NEXTCLOUD-2021-32658 Sensitive data may not be removed from storage on account removal
Nextcloud Android is the Android client for the Nextcloud open source home cloud system. Due to a timeout issue the Android client may not properly clean all sensitive data on account removal. This could include sensitive key material such as the End-to-End encryption keys. It is recommended that...
CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1
CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1. An upgraded version of the package is available that resolves this issue...
MINI-4VPW-5GX4-R3V6
Bulletin has no description...