41873 matches found
Security Bulletin: Vulnerability in brace-expansion affect IBM Cloud Pak System [CVE-2025-5889]
Summary A vulnerability was found in juliangruber brace-expansion affect IBM Cloud Pak System. The vulnerability was addressed in Cloud Pak System. Vulnerability Details CVEID:CVE-2025-5889 DESCRIPTION: A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It h...
EUVD-2026-90686
Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead of fetchWithBlacklist. Authenticated builder users can send a prompt to POST /api/ai/tables...
CVE-2026-103757 Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation
Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead of fetchWithBlacklist. Authenticated builder users can send a prompt to POST /api/ai/tables...
CVE-2026-103757 Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation
Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead of fetchWithBlacklist. Authenticated builder users can send a prompt to POST /api/ai/tables...
CVE-2026-103757 Budibase before 3.41.0 SSRF via uploadUrl in AI Table Generation
Budibase through 3.41.0 contains a server-side request forgery vulnerability in AI table generation because the uploadUrl function in packages/server/src/utilities/fileUtils.ts uses raw node-fetch instead of fetchWithBlacklist. Authenticated builder users can send a prompt to POST /api/ai/tables...
Security Bulletin: Multiple vulnerabilities in i18next-http-middleware affect IBM Cloud Pak System
Summary Multiple vulnerabilities in i18next-http-middleware affect IBM Cloud Pak System CVE-2026-41683, CVE-2026-41690, CVE-2026-42353. Vulnerability Details CVEID:CVE-2026-41683 DESCRIPTION: i18next-http-middleware is a middleware to be used with Node.js web frameworks like express or Fastify an...
Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System
Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-24072 DESCRIPTION: An escalation of privilege bug in various modules in Apache HTTP 2.4.66 and earlier allows local .htaccess authors to read files with the privileges of...
Security Bulletin: Cross-site Scripting, HTML Injection and Use of Weak Cryptographic Algorithm vulnerabilities in IBM Cloud Pak System
Summary Cross-site Scripting, HTML Injection and Use of Weak Cryptographic Algorithm vulnerabilities were found in Cloud Pak SystemCVE-2026-3295, CVE-2023-38375, CVE-2026-3161,CVE-2026-4418. Those vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details...
ROOT-APP-MAVEN-CVE-2026-41002 CVE-2026-41002 in org.springframework.cloud:spring-cloud-config-server - Patched by Root
Root has patched CVE-2026-41002 in the org.springframework.cloud:spring-cloud-config-server package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-40982 CVE-2026-40982 in org.springframework.cloud:spring-cloud-config-server - Patched by Root
Root has patched CVE-2026-40982 in the org.springframework.cloud:spring-cloud-config-server package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-22739 CVE-2026-22739 in org.springframework.cloud:spring-cloud-config-server - Patched by Root
Root has patched CVE-2026-22739 in the org.springframework.cloud:spring-cloud-config-server package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2026-40981 CVE-2026-40981 in org.springframework.cloud:spring-cloud-config-server - Patched by Root
Root has patched CVE-2026-40981 in the org.springframework.cloud:spring-cloud-config-server package for Root:Maven. Multiple fixed versions available...
Security Bulletin: Due to use of WebSphere Application Server - Liberty, IBM Cloud Pak System is affected by multiple vulnerabilities.
Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-11541 DESCRIPTION: IBM CICS Transaction Gateway for Multiplatforms 9.1, 9.2, 9.3, and 10.1 IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Serv...
BIT-KYVERNO-2026-100705 Kyverno before 1.19.1 SSRF via legacy apiCall service executor
Kyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist 169.254.169.254, 169.254.169.253, metadata.google.internal, 127.0.0.0/8, ::1/128 and the scoped-token control were wired only into the new CEL http.Get/Post library and were never applied to the legac...
Security Bulletin: Due to use of VMware ESXi and vCenter, IBM Cloud Pak System is affected by multiple vulnerabilities.
Summary Vulnerabilities in VMware ESXi and vCenter affect IBM Cloud Pak System. IBM Cloud Pak System version 2.3.6.2 has addressed these vulnerabilities. Cloud Pak Sytem has updated Platform System Manager PSM and workload nodes to VMware ESXi 83U3k and VMware vCenter to VCSA 83U3k. Vulnerability...
Meari IoT Cloud Platform OpenAPI Service
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow attackers to manipulate device configurations, trigger unauthorized behaviors, and access sensitive information such as device credentials, owner details, and network data without proper authorization. 2. RECOMMENDED...
ROOT-APP-MAVEN-CVE-2025-41243 CVE-2025-41243 in org.springframework.cloud:spring-cloud-gateway-server-webflux - Patched by Root
Root has patched CVE-2025-41243 in the org.springframework.cloud:spring-cloud-gateway-server-webflux package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-41253 CVE-2025-41253 in org.springframework.cloud:spring-cloud-gateway-server - Patched by Root
Root has patched CVE-2025-41253 in the org.springframework.cloud:spring-cloud-gateway-server package for Root:Maven. Multiple fixed versions available...
EUVD-2025-209815
An untrusted pointer dereference in the ionic cloud driver for VMWare ESXi could allow an attacker with an unprivileged VM to read kernel memory or co-located guest VM memory, potentially resulting in loss of confidentiality or availability...