RHSA-2026:55855 Red Hat Security Advisory: libssh security update

Bulletin has no description...

389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing

A stack buffer overflow flaw was found in 389 Directory Server 389-ds-base. The getruvelementfromberval function in repl5ruv.c copies digit characters from a network-supplied RUV berval into a fixed 16-byte stack buffer without bounds checking. A remote unauthenticated attacker can crash the LDAP...

org.apache.tomcat/tomcat: Apache Tomcat: Unauthorized resource access via FORM authentication bypass

A flaw was found in Apache Tomcat. This incorrect authorization vulnerability occurs within the FORM authentication process, allowing a user to bypass security constraints. This bypass enables unauthorized access to resources via a GET request, even when those resources are intended to be...

tomcat: Apache Tomcat: Authentication bypass via limited replay attack in DIGEST authenticator

A flaw was found in Apache Tomcat. This vulnerability, an authentication bypass by capture-replay, affects the DIGEST authenticator. A remote attacker can exploit this by making a specially crafted DIGEST authenticated request with a nonceCount at the upper boundary of the replay window. This...

CVE-2026-70426 vulnerabilities

Vulnerabilities for packages: jenkins...

CVE-2026-70429 vulnerabilities

Vulnerabilities for packages: jenkins...

CVE-2026-70430 vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-C232-R242-W9V9 vulnerabilities

Vulnerabilities for packages: jenkins...

GHSA-V269-8R2R-VJ93 vulnerabilities

Vulnerabilities for packages: jenkins...

MINI-XPPJ-GM2M-WMHW

Bulletin has no description...

MINI-QHQ4-RVF5-C4JV

Bulletin has no description...

Exploit for Improper Authentication in Apple Macos

cve-id Donate Support the maintenance of this project wit...

ANT-2026-F5JK7RDG · supabase/postgres · other

other high Severity Claude high · Security research firm - · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-F5JK7RDG: Cloud image provisioned with default root password and SSH password auth The cloud-init user-data baked...

ANT-2026-GEM3N3N3 · RocketChat/Rocket.Chat · NoSQL Injection

sql-injection critical CVE-2026-29198 Severity Claude critical · Security research firm - · Maintainer critical REPORT Anthropic's analysis of this finding, sealed at approval. ANT-2026-GEM3N3N3: Critical vulnerability cvss 9.8: complete authentication bypass to admin permissions On Rocket.Chat...

EUVD-2026-60484

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic...

AlmaLinux 9 : curl (ALSA-2026:55439)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:55439 advisory. curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication CVE-2026-1965 curl: curl: Information disclosure via...

PT-2026-78241

Name of the Vulnerable Software and Affected Versions 4gaBoards versions prior to 3.3.9 Description An issue exists where any authenticated user can enumerate account information for all users and retrieve arbitrary account details. This occurs because the users/index and users/show actions rely...

PT-2026-77247

Missing authentication in initial setup functionality left exposed after initial setup is completed in GBIF Integrated Publishing Toolkit versions before 3.3.4 allows remote authenticated attackers to gain administrative control via authentication bypass...

EUVD-2021-34864

An issue exists in pson EH-TW5350 Epson iProjection.apk v3.2.6. If you identify a projector equipped with an iProjection function, you can access the projector using hard-coded authentication information and control the projector maliciously...

PT-2026-77254

Name of the Vulnerable Software and Affected Versions Epson EH-TW5350 iProjection.apk version 3.2.6 Description The application contains hard-coded authentication information. An attacker can use these credentials to gain unauthorized access to a projector equipped with the iProjection function a...