ROS-20261023-73-0002

The vulnerability of TLS and SSL OpenSSL tools is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

ROS-20261023-73-0020

The vulnerability in sudo is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information...

ROS-20261023-73-1205

The vulnerability in nodejs-babel-core is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2026-122134

The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. From version 22.04 to before version 26.05, the unauthenticated REST endpoint GET /api/v1/index/solrField/spatial/search concatenates the user-supplied region query parameter directly into a Sol...

PT-2026-122041

In the Linux kernel, the following vulnerability has been resolved: cipso: adjust cached option offsets when removing CIPSO cipso v4 skbuff delattr removes the CIPSO bytes but does not adjust cached offsets for options that follow them. For example, with a valid 10-byte CIPSO option followed by a...

Node.js Node permissions and access control issues vulnerability

Node.js versions 26.12.0 and earlier contain a permission and access control vulnerability. This issue stems from improper enforcement of the permission model on the file system: when a request path is shorter than the wildcard authorization prefix, the base tree search stops comparing early and...

Intranda goobi-viewer-core SQL injection vulnerability

A security vulnerability exists in Intranda Goobi Viewer Core versions from 22.04 up to and including 26.05. This vulnerability arises because the unauthenticated REST endpoint GET /api/v1/index/solrField/spatial/search directly concatenates user-supplied region query parameters into the Solr que...

Okta Access Gateway input validation error vulnerability

A security vulnerability exists in Okta Access Gateway versions prior to 2026.10.2. This vulnerability stems from improper input validation in the Admin Console, allowing specially crafted configuration values to be processed. Authenticated administrators can exploit this to execute system comman...

Linux Distros Unpatched Vulnerability : CVE-2026-101803

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: XML. Supported versions that are affected are MySQL Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-101611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: InnoDB. Supported versions that are affected are MySQL Server: 8.4.0-8.4.12,...

Linux Distros Unpatched Vulnerability : CVE-2026-101787

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server:...

Linux Distros Unpatched Vulnerability : CVE-2026-101721

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are MySQL...

Oracle VM VirtualBox 7.2.18 (October 2026 CPU)

The 7.2.16 versions of VM VirtualBox installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16...

Linux Distros Unpatched Vulnerability : CVE-2026-101610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are MySQL Server:...

CGM CLININET authorization issue vulnerability

Versions of CGM CLININET prior to 2026.MS3 contain an authorization issue vulnerability. This vulnerability stems from a lack of authentication for critical functions within the /DocManagment path, potentially allowing unauthenticated attackers on adjacent networks to obtain lists of patient...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 5.10. It arises when, during cleanup by ebrelocateparseslow, a post-increment buffercount is used to release relocation pointers within the exec array; this may lead to out-of-bounds access and the deallocation of entries outside the origina...

Vulnerability related to CGM CLININET permission, authorization, and access control issues

Versions of CGM CLININET prior to 2026.MS3 contain a vulnerability related to permission and access control issues. This vulnerability arises from storing production database usernames and passwords, as well as RabbitMQ broker credentials, in the SysIO.pl configuration file. Additionally, insecur...

PT-2026-121993

In the Linux kernel, the following vulnerability has been resolved: riscv: futex: untag the user pointer before the atomic access access ok checks untagged addruaddr, but arch futex atomic op inuser and futex atomic cmpxchg inatomic hand the raw uaddr to the inline asm amoswap/amoadd/.../lr.w+sc....

PT-2026-121895

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the arm64 architecture where mapping a stack-top page via /dev/mem with PROT NONE and subsequently reading the process's /proc//cmdline triggers a spurious warning. Th...

Mervin Praison PraisonAI authorization issue vulnerability

Versions Mervin Praison PraisonAI from 3.11.0 up to 4.6.59 contain an authorization issue vulnerability. This vulnerability arises because Slack bots fail to apply the allowedusers, allowedchannels, and unknownuser pairing policies within their appmention event handler, allowing unauthorized user...