91507 matches found
CVE-2026-86733 Snipe-IT before 8.7.0 Remote Code Execution via Backup Restore
Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client mysql without the --binary-mode flag, so the client interprets lines beginning with backslash commands such as ! as local shell commands. An authenticated...
CVE-2026-86733
Snipe-IT before 8.7.0 streams the SQL entry from an uploaded backup archive directly into the MySQL/MariaDB command-line client "mysql" without the --binary-mode flag, so the client interprets lines beginning with backslash commands such as "!" as local shell commands. An authenticated...
CVE-2026-86733
Snipe-IT before 8.7.0 is vulnerable to remote code execution via its backup restore feature. The application streams SQL from an uploaded backup archive directly into the MySQL/MariaDB command-line client without the --binary-mode flag, causing the client to interpret backslash commands (e.g., \!...
Important: Red Hat Security Advisory: libyang security, bug fix, and enhancement update
An update for libyang is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob
A flaw was found in libyang, a YANG data modeling language library. An integer overflow in the lybreadstring function can lead to a heap buffer overflow when parsing a maliciously crafted LYB binary blob. A remote attacker, by supplying this malicious LYB data to any libyang consumer such as a...
Important: Red Hat Security Advisory: libyang security, bug fix, and enhancement update
An update for libyang is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
libyang: libyang: Denial of Service or arbitrary code execution via maliciously crafted LYB binary blob
A flaw was found in libyang, a YANG data modeling language library. An integer overflow in the lybreadstring function can lead to a heap buffer overflow when parsing a maliciously crafted LYB binary blob. A remote attacker, by supplying this malicious LYB data to any libyang consumer such as a...
Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)
Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 1.0 have been addressed in version 11.3.1.2-IF2 Vulnerability Details CVEID:CVE-2026-41848 DESCRIPTION: Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to...
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Proftpd
CVE-2010-4221 — ProFTPD TELNET IAC Stack Overflow: From Patch...
Security Bulletin: IBM Cloud Pak for Data System (CPDS 2.0) is affected by multiple vulnerabilities in various components
Summary IBM Cloud Pak for Data System 2.0 includes several open-source, third-party, and containerized components as part of its software stack and system environment. Multiple security vulnerabilities have been identified across various components and libraries, including PLY, pyOpenSSL,...
Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 2.0)
Summary Vulnerabilities identified in IBM Cloud Pak for Data System Yosemite 2.0 have been addressed in version 11.3.1.3-IF4 Vulnerability Details CVEID:CVE-2026-59889 DESCRIPTION: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
KB5122775 - Description of the security update for SQL Server 2017 GDR: September 8, 2026
KB5122775 - Description of the security update for SQL Server 2017 GDR: September 8, 2026 Applies To SQL Server 2017 on Windows SQL Server 2017 on Linux Release date: September 8, 2026 Version: 14.0.2130.4 Summary Known issues in this update Improvements and fixes included in this update How to...
KB5122774 - Description of the security update for SQL Server 2017 CU31: September 8, 2026
KB5122774 - Description of the security update for SQL Server 2017 CU31: September 8, 2026 Applies To SQL Server 2017 on Linux SQL Server 2017 on Windows Release date: September 8, 2026 Version: 14.0.3550.4 Summary Known issues in this update Improvements and fixes included in this update How to...
KB5122772 - Description of the security update for SQL Server 2019 CU32: September 8, 2026
KB5122772 - Description of the security update for SQL Server 2019 CU32: September 8, 2026 Applies To SQL Server 2019 on Windows SQL Server 2019 on Linux Release date: September 8, 2026 Version: 15.0.4490.9 Summary Known issues in this update Improvements and fixes included in this update How to...
KB5122771 - Description of the security update for SQL Server 2022 GDR: September 8, 2026
KB5122771 - Description of the security update for SQL Server 2022 GDR: September 8, 2026 Applies To SQL Server 2022 on Windows all editions SQL Server 2022 on Linux all editions Release date: September 8, 2026 Version: 16.0.1200.5 Summary Known issues in this update Improvements and fixes includ...
KB5122768 - Description of the security update for SQL Server 2022 CU26: September 8, 2026
KB5122768 - Description of the security update for SQL Server 2022 CU26: September 8, 2026 Applies To SQL Server 2022 on Windows all editions SQL Server 2022 on Linux all editions Release date: September 8, 2026 Version: 16.0.4275.2 Summary Known issues in this update Improvements and fixes...
KB5122770 - Description of the security update for SQL Server 2025 GDR: September 8, 2026
KB5122770 - Description of the security update for SQL Server 2025 GDR: September 8, 2026 Applies To SQL Server 2025 on Windows all editions, SQL Server 2025 on Linux all editions Release date: September 8, 2026 Version: 17.0.1135.8 Summary Known issues in this update Improvements and fixes...
KB5122769 - Description of the security update for SQL Server 2025 CU8: September 8, 2026
KB5122769 - Description of the security update for SQL Server 2025 CU8: September 8, 2026 Applies To SQL Server 2025 on Windows all editions, SQL Server 2025 on Linux all editions Release date: September 8, 2026 Version: 17.0.4085.5 Summary Known issues in this update Improvements and fixes...
KB5122773 - Description of the security update for SQL Server 2019 GDR: September 8, 2026
KB5122773 - Description of the security update for SQL Server 2019 GDR: September 8, 2026 Applies To SQL Server 2019 on Windows SQL Server 2019 on Linux Release date: September 8, 2026 Version: 15.0.2190.7 Summary Known issues in this update Improvements and fixes included in this update How to...