QNAP Qsync Central 安全漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a security vulnerability caused by a buffer overflow. This vulnerability could allow remote attackers to modify memory o...

Wazuh 4.14.3

Wazuh is a free and open source security platform that unifies XDR and SIEM capabilities. It protects workloads across on-premises, virtualized, containerized, and cloud-based environments. This is the source code release...

QNAP Qsync Central 代码问题漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a code vulnerability caused by a null pointer dereferencing, which could allow remote attackers to launch a...

QNAP Qsync Central 安全漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained security vulnerabilities. These vulnerabilities were due to uncontrolled resource consumption, which could allow local...

IBM Db2 Big SQL on Cloud Pak for Data Resource Management Error Vulnerability

IBM Db2 Big SQL on Cloud Pak for Data is a massively parallel processing SQL engine from International Business Machines IBM. A resource management error vulnerability exists in IBM Db2 Big SQL on Cloud Pak for Data, which stems from not properly limiting system resource allocation and can be...

PT-2026-7632

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions affected versions not specified Description A denial-of-service DoS condition exists in the Advanced DNS Security ADNS feature of Palo Alto Networks PAN-OS software. An unauthenticated attacker can exploit th...

PT-2026-7722

Name of the Vulnerable Software and Affected Versions LangChain versions prior to 1.1.14 Description The RecursiveUrlLoader class within the @langchain/community component is a web crawler that recursively follows links from a starting URL. The preventOutside option, intended to restrict crawling...

QNAP Qsync Central 代码问题漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a code vulnerability caused by a null pointer dereferencing, which could lead to a denial-of-service attack...

QNAP Qsync Central 代码问题漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a code vulnerability caused by a null pointer dereferencing, which could lead to a denial-of-service attack...

QNAP Qsync Central 安全漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a security vulnerability caused by relative path traversal, which could lead to the reading of unexpected files or syste...

QNAP Qsync Central 代码问题漏洞

QNAP Qsync Central is a cloud-based file synchronization service for NAS devices provided by QNAP Technology Co., Ltd. Versions of QNAP Qsync Central prior to 5.0.0.4 contained a code vulnerability caused by a null pointer dereferencing, which could lead to a denial-of-service attack...

IBM Concert Access Control Error Vulnerability (CNVD-2026-13787)

IBM Concert is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. An Access Control Error vulnerability exists in IBM Concert that stems from a failure to disable a session after logging out, which could be exploited ...

Palo Alto Networks PAN-OS 11.2.x < 11.2.10 / 12.1.x < 12.1.4 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 11.2.x prior to 11.2.10 or 12.1.x prior to 12.1.4. It is, therefore, affected by a vulnerability. A denial-of-service DoS vulnerability in the Advanced DNS Security ADNS feature of Palo Alto Networks PAN-OS software enables an...

CVE-2026-21529

CVE-2026-21529 involves an improper neutralization of input during web page generation (cross-site scripting) in Azure HDInsight. The issue allows an authorized attacker to perform network-based spoofing by exploiting insufficient input handling during page creation. The vulnerability affects the...

Azure IoT Explorer Information Disclosure Vulnerability

Binding to an unrestricted ip address in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: nova, sftpgo-plugin-eventsearch, blob-csi, gostatsd, influx, telegraf, helm-mapkubeapis, maru, spicedb-operator, vt-cli, mailpit, cri-tools, dapr, gomplate, promxy, doppler-kubernetes-operator, node-problem-detector, victoriametrics, kube-vip-cloud-provider,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: nova, sftpgo-plugin-eventsearch, blob-csi, gostatsd, influx, fq, telegraf, helm-mapkubeapis, maru, spicedb-operator, vt-cli, mailpit, cri-tools, dapr, gomplate, promxy, doppler-kubernetes-operator, smarter-device-manager, node-problem-detector, victoriametrics,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: nova, sftpgo-plugin-eventsearch, blob-csi, gostatsd, influx, fq, telegraf, helm-mapkubeapis, maru, spicedb-operator, vt-cli, mailpit, cri-tools, dapr, gomplate, promxy, doppler-kubernetes-operator, smarter-device-manager, node-problem-detector, victoriametrics,...

GHSA-H355-32PF-P2XM vulnerabilities

Vulnerabilities for packages: nova, sftpgo-plugin-eventsearch, blob-csi, gostatsd, influx, telegraf, helm-mapkubeapis, maru, spicedb-operator, vt-cli, mailpit, cri-tools, dapr, gomplate, promxy, doppler-kubernetes-operator, node-problem-detector, victoriametrics, kube-vip-cloud-provider,...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: gitlab-workhorse-ce-fips, nerdctl-fips, distribution, logstash, docker-compose, policy-bot, flux-source-watcher-fips, newrelic-k8s-metadata-injection-fips, rekor, sbom-scorecard, sriov-network-device-plugin, cluster-api-azure-controller, tetragon-fips, calico,...