52614 matches found
Security Bulletin: IBM SOAR QRadar Plugin App is vulnerable to using components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM SOAR QRadar Plugin App has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2025-68146 DESCRIPTION: filelock is a...
Security Bulletin: Vulnerability in platform-python affects IBM Netezza Appliance
Summary The platform-python package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2025-13836 Vulnerability Details CVEID:CVE-2025-13836 DESCRIPTION: When reading an HTTP response from a server, if no read amount is specified, the default behavior wi...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.28 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.28 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.13.65 packages and security update
Red Hat OpenShift Container Platform release 4.13.65 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
Hidden Passenger? How Taboola Routes Logged-In Banking Sessions to Temu
A bank approved a Taboola pixel. That pixel quietly redirected logged-in users to a Temu tracking endpoint. This occurred without the bank’s knowledge, without user consent, and without a single security control registering a violation. Read the full technical breakdown in the Security Intelligen...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.65 bug fix and security update
Red Hat OpenShift Container Platform release 4.13.65 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.13.65 bug fix and security update
Red Hat OpenShift Container Platform release 4.13.65 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...
Malicious code in ground-platform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 349e5651266238ca632ac59b3cdfc35ffe594ec082531700d4fde5a4d3bd0a51 The package ground-platform was found to contain malicious code...
MAL-2026-2767 Malicious code in ground-platform (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 349e5651266238ca632ac59b3cdfc35ffe594ec082531700d4fde5a4d3bd0a51 The package ground-platform was found to contain malicious code...
CVE-2024-10242 Reflected Cross-Site Scripting via Authentication Endpoint in WSO2 API Manager Allows UI Modification and Redirection
The authentication endpoint fails to adequately validate user-supplied input before reflecting it back in the response. This allows an attacker to inject malicious script payloads into the input parameters, which are then executed by the victim's browser. Successful exploitation can enable an...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.13.65 security and extras update
Red Hat OpenShift Container Platform release 4.13.65 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Low...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.28 security and extras update
Red Hat OpenShift Container Platform release 4.19.28 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a security impact of...
CVE-2026-41035
In rsync 3.0.1 through 3.4.1, receivexattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X aka --xattrs. On Linux, many but not all common configurations are vulnerable. Non-Linux platforms are more widely vulnerable...
CVE-2026-41015
CVE-2026-41015 affects radare2 prior to the commit 9236f44. On UNIX configurations without SSL, a PDB name passed to rabin2 -PP can lead to local command injection. The vulnerability window is stated as between 6.1.2 and 6.1.3, with the fix introduced by the commit 9236f44 (referenced in the link...
CVE-2026-1965 affecting package curl for versions less than 8.11.1-6
CVE-2026-1965 affecting package curl for versions less than 8.11.1-6. A patched version of the package is available...
[SECURITY] Fedora 42 Update: moby-engine-29.4.0-1.fc42
Docker is an open source project to build, ship and run any application as a lightweight container. Docker containers are both hardware-agnostic and platform-agnostic. This means they can run anywhere, from your laptop to the largest EC2 compute instance a nd everything in between =E2=80=94 and...
EUVD-2026-23114
Pega Platform versions 8.1.0 through 25.1.1 are affected by a Stored Cross-Site Scripting vulnerability in a user interface component. Requires a high privileged user with a developer role...
EUVD-2026-23112
Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component. Requires a high privileged user with a developer role...
PT-2026-37114
Name of the Vulnerable Software and Affected Versions Angular versions prior to 19.2.21 Angular versions prior to 20.3.19 Angular versions prior to 21.2.9 Angular versions prior to 22.0.0-next.8 Description A Server-Side Request Forgery SSRF issue exists in @angular/platform-server due to imprope...
