PT-2026-97722

Name of the Vulnerable Software and Affected Versions PaperCut Hive embedded application for Ricoh devices affected versions not specified Description An input validation issue exists where the application fails to properly sanitize input received during the NFC card reading process before passin...

Security update for python-GitPython (important)

openSUSE security update: security update for python-gitpython ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21874-1 Rating: important References: bsc1273357 bsc1273358 bsc1273359 bsc1273364 bsc1273414 bsc1273498 bsc1275745 bsc1275746 bsc1275747...

SUSE CVE-2026-96281

On a multi-user system, a user with an active local login session could downgrade a system-wide Flatpak app to an older version by removing the app's remote ref via the unprivileged system-helper RemoveLocalRef method, causing the anti-downgrade check to fail to find a reference date. A malicious...

CVE-2026-6794

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process...

CVE-2026-6935

IBM Concert versions 1.0.0 through 3.0.0 are vulnerable to command injection due to the software invoking operating system commands without fully qualifying executable paths or sufficiently restricting search path resolution. An attacker with local system access can manipulate the search path env...

CVE-2026-6935 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an attacker with local system access can manipulate the search path environment to execute untrusted or malicious code...

EUVD-2026-85670

IBM Concert 1.0.0 through 3.0.0 invokes operating system commands without fully qualifying executable paths or adequately restricting search path resolution. As a result, an attacker with local system access can manipulate the search path environment to execute untrusted or malicious code...

CVE-2026-6794 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process...

CVE-2026-6794

IBM Concert versions 1.0.0 through 3.0.0 are affected by a double free vulnerability caused by incorrect memory management . A local attacker can exploit this flaw to corrupt heap memory and achieve arbitrary code execution within the context of the affected process. No specific remediation detai...

EUVD-2026-85667

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process...

CVE-2026-6794 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due to incorrect memory management. A local attacker can exploit this flaw to corrupt heap memory and execute arbitrary code in the context of the affected process...

CVE-2026-6730

IBM Concert versions 1.0.0 through 3.0.0 are susceptible to a buffer overflow vulnerability. The root cause is identified as improper bounds checking , which could allow a local user to overflow the buffer and execute arbitrary code on the affected system. No specific exploit details or remediati...

CVE-2026-6730 Multiple Vulnerabilities in IBM Concert Software

IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

EUVD-2026-85662

IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by improper bounds checking. A local user could overflow the buffer and execute arbitrary code on the system...

CVE-2026-68490

Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts...

CVE-2026-68490

Incorrect permission assignment allows local users to obtain sensitive CalDAV/CardDAV information belonging to other accounts...

CVE-2026-68490

A flaw in the CalDAV and CardDAV services of cPanel & WHM allows a local user to read sensitive calendar events and contacts belonging to other accounts due to incorrect permission assignments. This issue affects cPanel & WHM version 120 and later . Remediation is available in versions 11.134.0.5...

CVE-2026-96549

A vulnerability has been found in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. This vulnerability affects unknown code of the file ssmpro/src/main/java/cn/sfturing/service/impl/CommonUserServiceImpl.java. Such manipulation leads to cleartext storage of sensitive information...

DEBIAN-CVE-2026-75131

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN connections to execute arbitrary code as root by injecting pppd options through a crafted VPN username. Attackers can embed a double-quote...

CVE-2026-96549 sfturing hosp_order CommonUserServiceImpl.java cleartext storage

A vulnerability has been found in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. This vulnerability affects unknown code of the file ssmpro/src/main/java/cn/sfturing/service/impl/CommonUserServiceImpl.java. Such manipulation leads to cleartext storage of sensitive information...