202527 matches found
PT-2026-71896
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Pathological inputs can cause an unescaped '/' to close prematurely. This allows attack-controlled data to inject arbitrary content, which may lead to Cross-Site...
PT-2026-71813
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read...
PT-2026-71741
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to unbounded resource allocation...
PT-2026-71819
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...
PT-2026-71698
Name of the Vulnerable Software and Affected Versions affected versions not specified Description The Bluetooth host GATT client function parse read std char desc in subsys/bluetooth/host/gatt.c fails to validate the minimum value of the per-entry stride rsp-len received from a remote GATT server...
PT-2026-71834
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...
ROS-20260813-73-0052
The vulnerability in uriparser is related to numerical truncation errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PT-2026-71866
Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Location and Description fields when creating a new asset...
CVE-2026-68110 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68110 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-53397 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-53397 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-68327 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68327 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-68222 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-68222 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64372 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64372 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64576 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-64576 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-64579 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-64579 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-63801 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-63801 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-63831 affecting package kernel for versions less than 6.6.150.1-1
CVE-2026-63831 affecting package kernel for versions less than 6.6.150.1-1. An upgraded version of the package is available that resolves this issue...
Security Bulletin: IBM i is Affected By An Improper Management Vulnerability in HTTP Server [CVE-2026-18071]
Summary IBM i is vulnerable to elevated privileges due to improper privilege management CVE-2026-18071 in HTTP Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18071 DESCRIPTION: IBM i could allow a local attacker to gain elevated privileges due to...
CVE-2026-73500
etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.5.33, 3.6.14, and 3.7.1, a network attacker who can reach an etcd TLS listener can open many TCP connections and never send a ClientHello. In client/pkg/transport/listenertls.go, each connection handle...