35388 matches found
GHSA-5G46-HMW3-W78X vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-melange, linux-gcp...
CVE-2026-53269 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-melange, linux-gcp...
CVE-2026-53256 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-melange, linux-gcp...
CVE-2026-53258 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-melange, linux-gcp...
GHSA-HQ32-RPPJ-R4RV vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-melange, linux-gcp...
GHSA-GJ4P-2QJV-WCHV vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-melange, linux-gcp...
CVE-2026-53261 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-melange, linux-gcp...
CVE-2026-53250 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-qemu-melange, linux-gcp...
Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by multiple vulnerabilities due to pyOpenSSL
Summary pyOpenSSL is used by IBM Cloud Pak for Data System 1.0 as a Python wrapper around the OpenSSL library for TLS/SSL functionality. Multiple vulnerabilities affect pyOpenSSL. CVE-2026-27448 involves improper handling of unhandled exceptions in the settlsextservernamecallback callback, which...
Akamai Cloud Pulse Audit Logs Are Generally Available
...
EUVD-2026-42726
Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with a loopback address. Attackers can exploit this bypass to...
PT-2026-57144
Name of the Vulnerable Software and Affected Versions guardrails-detectors affected versions not specified Red Hat Enterprise Linux affected versions not specified Red Hat OpenShift AI affected versions not specified Description A flaw in the guardrails-detectors component allows a remote attacke...
PT-2026-57185
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2026.1.2 Description Stored Cross-Site Scripting XSS is possible on the cloud profile page. This occurs when the application fails to properly sanitize data reported by agents, allowing an attacker to injec...
VulnCheck KEV: CVE-2020-17103
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability...
CVE-2026-58122 Hermes WebUI < 0.51.307 Authentication Bypass via X-Forwarded-For Header Spoofing
Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with a loopback address. Attackers can exploit this bypass to...
CVE-2026-58122
CVE-2026-58122 affects Hermes WebUI prior to 0.51.307. An authentication bypass allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by spoofing X-Forwarded-For with a loopback address. Exploitation enables server-side request forgery against ...
CVE-2026-58122
Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with a loopback address. Attackers can exploit this bypass to...
CVE-2026-58122 Hermes WebUI < 0.51.307 Authentication Bypass via X-Forwarded-For Header Spoofing
Hermes WebUI before 0.51.307 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to circumvent local-origin IP restrictions on onboarding endpoints by supplying a spoofed X-Forwarded-For header with a loopback address. Attackers can exploit this bypass to...