211737 matches found
CVE-2026-110245 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication...
EUVD-2026-113127
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication...
CVE-2026-110245
Langflow OSS versions 1.0.0 through 1.12.4 are vulnerable to improper authentication (CWE-287 ). This flaw could allow a remote attacker to obtain sensitive information. To remediate this vulnerability, IBM strongly recommends upgrading to version 1.12.5 . For users on affected versions, it is ad...
CVE-2026-110245
IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper authentication...
Important: Red Hat Security Advisory: nodejs:24 security, bug fix, and enhancement update
An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
nodejs: nodejs: Authentication bypass via non-canonical IPv4 hostname verification
A flaw was found in Node.js TLS hostname verification. When a client connects using a non-canonical IPv4 hostname spelling for example 0177.0.0.1, 0x7f.0.0.1, 2130706433, or 127.1, tls.checkServerIdentity may fail to classify the host as an IP address, normalize it to a canonical form, and match...
CVE-2026-109952
A flaw was found in FreeRDP. A remote attacker, acting as a malicious server or an on-path attacker, can exploit this flaw to cause information disclosure by intercepting user credentials in cleartext. Due to missing validation during connection negotiation, the client accepts unapproved security...
EUVD-2026-112921
Improper Link Resolution Before File Access 'Link Following' CWE-59 in Elastic Cloud Enterprise ECE can lead to authentication bypass and unauthorized changes to the configuration of other deployments on the same host via Symlink Attack CAPEC-132...
CVE-2026-115708 Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass
Improper Link Resolution Before File Access 'Link Following' CWE-59 in Elastic Cloud Enterprise ECE can lead to authentication bypass and unauthorized changes to the configuration of other deployments on the same host via Symlink Attack CAPEC-132...
CVE-2026-115708
Elastic Cloud Enterprise (ECE) is vulnerable to an Improper Link Resolution Before File Access (CWE-59 ) flaw, which allows for a Symlink Attack (CAPEC-132 ). The root cause enables an attacker to achieve authentication bypass and perform unauthorized configuration changes on other deployments ho...
CVE-2026-115708 Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass
Improper Link Resolution Before File Access 'Link Following' CWE-59 in Elastic Cloud Enterprise ECE can lead to authentication bypass and unauthorized changes to the configuration of other deployments on the same host via Symlink Attack CAPEC-132...
Critical: Red Hat Security Advisory: OpenJDK 25.0.5 Security Update for Portable Linux Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
curl: Information disclosure due to uncleared proxy authentication state
A flaw was found in libcurl. When reusing a libcurl handle for sequential transfers with environment-variable proxy configuration, the library does not properly clear the proxy authentication state. This oversight can lead to the unintended disclosure of Proxy-Authorization headers to an incorrec...
curl: curl: Information disclosure via incorrect Digest authentication header reuse
A flaw was found in curl. When libcurl performs a transfer to an HTTP origin using Digest authentication and then reuses the same connection handle for a subsequent transfer to a different origin, it may incorrectly send the authentication header intended for the first origin to the second. This...
Important: Red Hat Security Advisory: curl security, bug fix, and enhancement update
An update for curl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Critical: Red Hat Security Advisory: OpenJDK 21.0.13 Security Update for Portable Linux Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...
Gitmails
Development - IMPORTANT This Gitmails version is no longer maintained. Check out the Gitmails Shell port if you want to use a version that is maintained and, hopefully, developed. If you do not want to use the shell port and prefer the Python version, feel free to fork Gitmails and direct it to...
RLSA-2026:88347 Important: java-25-openjdk security update
The OpenJDK 25 packages provide the OpenJDK 25 Java Runtime Environment and the OpenJDK 25 Java Software Development Kit. Security Fixes: JDK: Enhance PKCS5 padding CVE-2026-83374 JDK: Enhance TLS certificate handling CVE-2026-83376 JDK: Improve C2 loop transformations CVE-2026-83378 JDK: Enhance...
Security Bulletin: IBM MQ is affected by an authentication bypass in IBM WebSphere Application Server Liberty (CVE-2026-14525)
Summary IBM MQ has addressed an authentication bypass in IBM WebSphere Application Server Liberty Vulnerability Details CVEID:CVE-2026-14525 DESCRIPTION: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authenticatio...
