4215 matches found
Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in postcss-selector-parser (CVE-2026-9358)
Summary A Regular Expression Denial of Service ReDoS vulnerability in the postcss-selector-parser library CVE-2026-9358 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 7.1.4. Vulnerability Details CVEID:CVE-2026-9358 DESCRIPTION: A vulnerabilit...
EUVD-2026-85177
Tauri's Content Security Policy hardening, which injects a random nonce to restrict script execution, provides zero protection when an application includes data: or blob: in its script-src directive. Per the CSP Level 3 specification, these scheme sources remain active even when a nonce is presen...
CVE-2026-95626
The Tauri framework v2 contains a vulnerability where its Content Security Policy (CSP) hardening is ineffective against specific URI schemes. While Tauri injects a random nonce to restrict script execution, the CSP Level 3 specification allows data: and blob: schemes to remain active even when a...
CVE-2026-42801 Deference after null check in as_rrc
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
Linux Distros Unpatched Vulnerability : CVE-2026-83601
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netdata is an open source observability tool. Prior to 2.10.4, an authenticated child agent can send an oversized DIMENSION SLOT value that str2ullencoded passe...
CVE-2026-42801: NULL Pointer Dereference
NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux asrrc module allows Pointer Manipulation. This vulnerability is associated with program file 3g.mod/lib/src/urrsir.c...
PT-2026-97324
Name of the Vulnerable Software and Affected Versions SunEditor versions prior to 2.47.11 Description The sanitizer in src/lib/core.js does not consistently reject namespaced or custom HTML elements, which allows event-handler attributes to remain on crafted elements. If an application renders...
CVE-2026-96674: Integer Overflow or Wraparound
alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer an...
PT-2026-105019
alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer an...
PT-2026-97261
Name of the Vulnerable Software and Affected Versions Tauri affected versions not specified Description The Content Security Policy CSP hardening mechanism, which uses a random nonce to restrict script execution, is ineffective if the application includes data: or blob: in its script-src directiv...
CVE-2026-59167: Improper Neutralization of Input During Web Page Generation
SunEditor is a lightweight and powerful WYSIWYG editor in vanilla JavaScript with no dependencies. Prior to 2.47.11, the sanitizer in src/lib/core.js does not consistently reject namespaced or custom HTML elements, allowing event-handler attributes to remain on crafted elements. When an applicati...
PT-2026-97330
Name of the Vulnerable Software and Affected Versions REDAXO versions prior to 5.21.2 Description REDAXO is a PHP-based content management system. The Mediapool Sync page, located at the endpoint redaxo/src/addons/mediapool/pages/sync.php, fails to apply the rex escape function which performs HTM...
Linux Distros Unpatched Vulnerability : CVE-2026-83602
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netdata is an open source observability tool. From 2.0.0 until 2.11.0, Netdata registers /api/v3/settings in src/web/api/v3/webapiv3.c with HTTPACLNOCHECK and...
PT-2026-97360
Name of the Vulnerable Software and Affected Versions alsa-lib versions prior to 1.2.16.2 Description An integer overflow occurs in src/topology/ctl.c when computing the combined topology element size using 32-bit arithmetic. This flaw allows bounds checks to be bypassed. By providing crafted...
Home Assistant: XSS in Statistics Graph Card
Summary An authenticated party can add a malicious name to any statistics-capable entity, allowing for Cross-Site Scripting attacks against anyone who views a Statistics Graph card containing that entity, when they hover over any data point on the chart. Payload Payload triggering An alternative,...
MCP Atlassian: OAuth fallback token storage writes plaintext access and refresh tokens with group-readable permissions
Summary When OAuth tokens are saved, MCP Atlassian always writes a plaintext fallback copy under /.mcp-atlassian/oauth-.json. The fallback file is created with the process default umask rather than restrictive permissions. In this environment the file was created as mode 0664, exposing access and...
MCP Atlassian: Insecure File Permissions on OAuth Token Storage
Summary The OAuth token fallback file storage in OAuthConfig.savetokenstofile creates token files containing access tokens, refresh tokens, and cloud IDs with default filesystem permissions typically 0644 on Linux, world-readable. Any local user on a shared system can read these files to obtain...
DEBIAN-CVE-2026-75432
An issue in yaml-cpp 0.9.0 allows a remote attacker to obtain sensitive information via the src/scanner.cpp, Scanner::PopIndent, and Scanner::PushIndentTo components...
