QNAP Qsync Central 代码问题漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a code vulnerability caused by a null pointer dereferencing, which could lead to a denial-of-service attack...

PT-2026-7632

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions affected versions not specified Description A denial-of-service DoS condition exists in the Advanced DNS Security ADNS feature of Palo Alto Networks PAN-OS software. An unauthenticated attacker can exploit th...

PT-2026-7722

Name of the Vulnerable Software and Affected Versions LangChain versions prior to 1.1.14 Description The RecursiveUrlLoader class within the @langchain/community component is a web crawler that recursively follows links from a starting URL. The preventOutside option, intended to restrict crawling...

IBM Db2 Big SQL on Cloud Pak for Data Resource Management Error Vulnerability

IBM Db2 Big SQL on Cloud Pak for Data is a massively parallel processing SQL engine from International Business Machines IBM. A resource management error vulnerability exists in IBM Db2 Big SQL on Cloud Pak for Data, which stems from not properly limiting system resource allocation and can be...

QNAP Qsync Central 代码问题漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a code vulnerability caused by a null pointer dereferencing, which could allow remote attackers to launch a...

QNAP Qsync Central 安全漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a security vulnerability caused by relative path traversal, which could lead to the reading of unexpected files or syste...

IBM Concert Access Control Error Vulnerability (CNVD-2026-13787)

IBM Concert is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. An Access Control Error vulnerability exists in IBM Concert that stems from a failure to disable a session after logging out, which could be exploited ...

Palo Alto Networks PAN-OS 11.2.x < 11.2.10 / 12.1.x < 12.1.4 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 11.2.x prior to 11.2.10 or 12.1.x prior to 12.1.4. It is, therefore, affected by a vulnerability. A denial-of-service DoS vulnerability in the Advanced DNS Security ADNS feature of Palo Alto Networks PAN-OS software enables an...

QNAP Qsync Central 代码问题漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a code vulnerability caused by a null pointer dereferencing, which could lead to a denial-of-service attack...

CVE-2026-21529

CVE-2026-21529 involves an improper neutralization of input during web page generation (cross-site scripting) in Azure HDInsight. The issue allows an authorized attacker to perform network-based spoofing by exploiting insufficient input handling during page creation. The vulnerability affects the...

Azure IoT Explorer Information Disclosure Vulnerability

Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, buf, paranoia, kube-vip, src-fingerprint, vault-k8s, crossplane-provider-aws-cloudfront, step-ca, mcp-grafana, vt-cli, minio-operator, crossplane-provider-aws-iam, kots, boring-registry, nri-apache, oauth2-proxy, mongo-tools,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, buf, paranoia, kube-vip, src-fingerprint, vault-k8s, crossplane-provider-aws-cloudfront, step-ca, mcp-grafana, multus-cni, vt-cli, minio-operator, crossplane-provider-aws-iam, kots, boring-registry, nri-apache, oauth2-proxy, mongo-tools,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, buf, paranoia, kube-vip, src-fingerprint, vault-k8s, crossplane-provider-aws-cloudfront, step-ca, mcp-grafana, vt-cli, minio-operator, crossplane-provider-aws-iam, kots, boring-registry, nri-apache, oauth2-proxy, mongo-tools,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: terraform-provider-azuread, buf, paranoia, kube-vip, src-fingerprint, vault-k8s, crossplane-provider-aws-cloudfront, step-ca, mcp-grafana, multus-cni, vt-cli, minio-operator, crossplane-provider-aws-iam, kots, boring-registry, nri-apache, oauth2-proxy, mongo-tools,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: kubevela-fips, chart-testing-fips, argo-rollouts, spicedb-operator-fips, crossplane-provider-aws-memorydb, azuredisk-csi, crossplane-provider-aws-elasticache, emqx-exporter-fips, extism, nuclei, mattmoor-chainit, kvm-device-plugin, packer,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: kubevela-fips, chart-testing-fips, argo-rollouts, spicedb-operator-fips, crossplane-provider-aws-memorydb, azuredisk-csi, crossplane-provider-aws-elasticache, emqx-exporter-fips, extism, nuclei, mattmoor-chainit, kvm-device-plugin, packer,...

CVE-2026-24321

SAP Commerce Cloud exposes multiple API endpoints to unauthenticated users, allowing them to submit requests to these open endpoints to retrieve sensitive information that is not intended to be publicly accessible via the front-end. This vulnerability has a low impact on confidentiality and does...

CVE-2026-24321

SAP Commerce Cloud exposes multiple API endpoints to unauthenticated users, allowing them to submit requests to these open endpoints to retrieve sensitive information that is not intended to be publicly accessible via the front-end. This vulnerability has a low impact on confidentiality and does...

CVE-2026-23684

A race condition vulnerability exists in the SAP Commerce cloud. Because of this when an attacker adds products to a cart, it may result in a cart entry being created with erroneous product value which could be checked out. This leads to high impact on data integrity, with no impact on data...