91718 matches found
PT-2026-97320
Name of the Vulnerable Software and Affected Versions sudo affected versions not specified Description A flaw exists in the evaluation of time-based access restrictions in sudoers rules. When NOTBEFORE or NOTAFTER timestamps omit the trailing 'Z' timezone indicator, the system relies on the TZ...
RHEL 9 : glib2 (RHSA-2026:70636)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:70636 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, th...
PT-2026-97223
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A heap-based out-of-bounds write occurs during the rendering of Circle annotations when processing malformed Cloudy appearance streams within specially crafted PDF files. This...
TencentOS Server 4: ghostscript (TSSA-2026:1047)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1047 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2026-96512: Incorrect Authorization
A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an...
PT-2026-97229
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A heap-based out-of-bounds read occurs during the handling of malformed PDF image masks. Inconsistent image metadata can lead to incorrect alpha-channel processing during...
CVE-2026-96676: Stack-based Buffer Overflow
A vulnerability was identified in Fast FAC1900R 201908272.0.2. The impacted element is the function getaliasname of the component uhttpd. Such manipulation leads to stack-based buffer overflow. The attack may be performed from remote. The exploit is publicly available and might be used. The vendo...
CVE-2026-96673: Improper Neutralization of Special Elements used in an SQL Command
Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the albumid path segment. Attackers can supply crafted SQL expressions in the albumid parameter to extract arbitrary data from the databa...
PT-2026-97151
Name of the Vulnerable Software and Affected Versions Fast FAC1203R Gigabit Edition version 2.0.4 Description A stack-based buffer overflow exists in the Device Discovery Service component. This issue occurs within the copy msg element function and can be triggered remotely through manipulation...
PT-2026-97123
Name of the Vulnerable Software and Affected Versions ClipBucket versions 5.x through 5.5.3-182 Description An issue exists in the photo search endpoint search result.php where the query parameter is passed unsanitized into SQL WHERE and ORDER BY clauses. This allows unauthenticated attackers to...
Linux Distros Unpatched Vulnerability : CVE-2026-91776
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - TypeDeserializerBase.findDeserializer in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based...
Linux Distros Unpatched Vulnerability : CVE-2026-91826
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow vulnerability in Samsung Opensource rLottie allows attackers to overflow buffers, leading to memory corruption when rendering crafte...
PT-2026-97221
Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A heap-based out-of-bounds write occurs during WebP image decoding due to improper handling of bitmap stride and target buffer formats. This issue can lead to an application...
CVE-2026-17635
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-based security constraints...
CVE-2026-17635
IBM Financial Transaction Manager (FTM) for RedHat OpenShift is impacted by a vulnerability that could allow a remote attacker to perform unauthorized actions . This issue stems from an improper configuration of HTTP method-based security constraints . The vulnerability is assigned a CRITICAL sev...
CVE-2026-17635 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-based security constraints...
CVE-2026-17635 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to perform unauthorized actions due to improper configuration of HTTP method-based security constraints...
MCP Atlassian: SSRF Protection Bypass
Environment - Project: sooperset/mcp-atlassian - Affected function: validateurlforssrf - Affected path: header-based Jira/Confluence URL authentication flow - Tested endpoint: POST /mcp - Tested version: 2.14.5 Description The SSRF protection in validateurlforssrf can be bypassed with a URL...
GHSA-49XV-9743-PW8W MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow
Summary The SSRF protection for header-based authentication uses a validate-then-use pattern vulnerable to DNS rebinding. validateurlforssrf resolves the hostname via DNS and checks that the resolved IP is globally routable. However, the actual HTTP request happens later, during which the DNS...
