248894 matches found
OESA-2026-4074 flatpak-builder security update
Flatpak-builder is a tool for building flatpaks from sources. Security Fixes: A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the...
OESA-2026-4065 freeipmi security update
The package provides "Remote-Console" and "System Management software" based on intelligent platform management interface specification. Security Fixes: FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in...
OESA-2026-4061 python-templated-dictionary security update
Dictionary where getitem is run through Jinja2 template. Security Fixes: The Mock software contains a vulnerability wherein an attacker could potentially exploit privilege escalation, enabling the execution of arbitrary code with root user privileges. This weakness stems from the absence of prope...
OESA-2026-4025 python-GitPython security update
GitPythonis a python library used to interact with Git repositories.GitPython provides object model read and write access to your git repository. Access repository information conveniently, alter the index directly, handle remotes, or go down to low-level object database access with big-files...
OESA-2026-4026 python-GitPython security update
GitPythonis a python library used to interact with Git repositories.GitPython provides object model read and write access to your git repository. Access repository information conveniently, alter the index directly, handle remotes, or go down to low-level object database access with big-files...
EUVD-2026-86479
IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL. The generatecertificate runs a Python script saved as a certificate file. The pyhton script attempts to retrieve code from a hardcoded http URL that is obfuscated with base6...
CVE-2026-78902
A Cross Site Scripting (XSS) vulnerability exists in Netgate pfSense 26.03.1-RELEASE . This flaw specifically affects the pfBlockerNG package , potentially allowing an attacker to achieve arbitrary code execution . No specific remediation or exploit details are provided in the documents.
EUVD-2026-87082
A reflected cross-site scripting XSS vulnerability in the EntryAbstract.save component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor privileges to execute arbitrary code in the context of the victim's browser via a crafted payload...
PT-2026-98854
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Insecure deserialization occurs in the Quartz JDBC job store. An authenticated attacker can exploit this flaw to execute arbitrary code on the affected system. Deserialization is the proces...
Adobe Experience Manager Forms JEE <= 6.5.25 / 6.5 LTS SP2 Multiple Vulnerabilities (APSB26-151)
The version of Adobe Experience Manager Forms JEE installed on the remote host is 6.5.25 or earlier, or 6.5 LTS SP2 or earlier. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-151 advisory. - Adobe Experience Manager Forms JEE is affected by an Incorrect...
CVE-2026-88420
A reflected cross-site scripting XSS vulnerability in the EntryAbstract.save component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor privileges to execute arbitrary code in the context of the victim's browser via a crafted payload...
PT-2026-99099
Name of the Vulnerable Software and Affected Versions GNU libextractor versions prior to 1.16 Description The software loads plugins from an untrusted search path defined by the LIBEXTRACTOR PREFIX environment variable without performing proper privilege checks. A local attacker can manipulate th...
CVE-2026-84862: Deserialization of Untrusted Data
IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in the Quartz JDBC job store. An authenticated attacker could exploit this vulnerability to execute arbitrary code on the affected system...
CVE-2026-85029: Improper Limitation of a Pathname to a Restricted Directory
IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory...
CVE-2026-88420: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in the EntryAbstract.save component of APSL puput v1.2.1 through v2.2.0 allows authenticated attackers with Wagtail Editor privileges to execute arbitrary code in the context of the victim's browser via a crafted payload...
CVE-2026-78902: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...
PT-2026-99116
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The SOAP HTTP client contains a flaw in how it manages response buffer growth. The system uses a check based on signed integer overflow, which is considered...
EUVD-2026-87083
Cross Site Scripting vulnerability in Netgate pfSense 26.03.1-RELEASE allows an attacker to execute arbitrary code via the pfBlockerNG package...
PT-2026-98858
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper limitation of a pathname to a restricted directory allows a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code. Recommendations At t...
