26238 matches found
PYSEC-2026-2453 Docassemble unauthorized access through URL manipulation
Impact The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96. Patches The vulnerability has been patched in version 1.4.97 of the master branch. The Docker image on docker.io has been patched...
PYSEC-2026-3116 TensorFlow has Null Pointer Error in TensorArrayConcatV2
Impact When ctx-stepcontainter is a null ptr, the Lookup function will be executed with a null pointer. python import tensorflow as tf tf.rawops.TensorArrayConcatV2handle='a', 'b', flowin = 0.1, dtype=tf.int32, elementshapeexcept0=1 Patches We have patched the issue in GitHub commit...
CVE-2026-54428
A flaw was found in Apache HttpComponents Core. This vulnerability, located in the HTTP/2 HPACK decoder, allows a remote attacker to cause a denial of service. By sending oversized compressed header blocks, an attacker can exhaust memory resources before the system's configured header list size...
CVE-2026-12080
A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...
MINI-768F-FVWC-G98H
Bulletin has no description...
CVE-2026-15536
CVE-2026-15536 affects itsourcecode Hospital Management System 1.0. The vulnerability is in /patviewprescription.php where manipulating the delid parameter enables SQL injection . It allows remote exploitation and publicly available exploits exist.
PT-2026-57819
Name of the Vulnerable Software and Affected Versions Skillable affected versions not specified Description A flaw in the lab platform allows for the forgery of a client-supplied identifier to bypass per-user lab launch limits. By modifying the userId variable provided by the browser, an attacker...
Linux Distros Unpatched Vulnerability : CVE-2026-14461
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtr is vulnerable to Out-of-bound read vulnerability in ipinfolookup function. An attacker who can influence the TXT response used for AS lookups can trigger th...
BIT-NEXTCLOUD-2023-49790 App PIN code can be bypassed in Nextcloud Files iOS
The Nextcloud iOS Files app allows users of iOS to interact with Nextcloud, a self-hosted productivity platform. Prior to version 4.9.2, the application can be used without providing the 4 digit PIN code. Nextcloud iOS Files app should be upgraded to 4.9.2 to receive the patch. No known workaroun...
CVE-2026-45571 affecting package packer for versions less than 1.9.5-17
CVE-2026-45571 affecting package packer for versions less than 1.9.5-17. An upgraded version of the package is available that resolves this issue...
CVE-2026-8926 affecting package curl for versions less than 8.11.1-10
CVE-2026-8926 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-56000 affecting package xorg-x11-server-Xwayland for versions less than 24.1.13-1
CVE-2026-56000 affecting package xorg-x11-server-Xwayland for versions less than 24.1.13-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-20216 affecting package clamav for versions less than 1.5.3-1
CVE-2026-20216 affecting package clamav for versions less than 1.5.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56003 affecting package libXfont2 for versions less than 2.0.8-1
CVE-2026-56003 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1
CVE-2026-56001 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-10536 affecting package curl for versions less than 8.11.1-10
CVE-2026-10536 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...
CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1
CVE-2026-20244 affecting package clamav for versions less than 1.5.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-14739 affecting package perl-DBI for versions less than 1.650-1
CVE-2026-14739 affecting package perl-DBI for versions less than 1.650-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1
CVE-2026-56002 affecting package libXfont2 for versions less than 2.0.8-1. An upgraded version of the package is available that resolves this issue...