193428 matches found
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an OS Command Injection in Pillow (CVE-2026-55798)
Summary IBM Watson Speech Services Cartridge is vulnerable to an OS Command Injection in Pillow, due to a flaw that allows WindowsViewer.getcommands to inject arbitrary cmd.exe commands in an f-string without escaping. Pillow is used in our Speech runtimes. This vulnerability has been addressed...
Pillow multi-frame loaders can reuse stale native image storage after mode transitions
Summary Pillow multi-frame image loaders can retain native ImagingCore storage allocated for one frame while changing the Python-side image mode and decoder tiles for a later frame. If frame 0 allocates storage for a narrow mode such as L, and a later frame of the same dimensions switches to a...
EUVD-2026-107573
Pillow multi-frame loaders can reuse stale native image storage after mode transitions...
GHSA-V9PV-5GC8-W2M6 Pillow multi-frame loaders can reuse stale native image storage after mode transitions
Summary Pillow multi-frame image loaders can retain native ImagingCore storage allocated for one frame while changing the Python-side image mode and decoder tiles for a later frame. If frame 0 allocates storage for a narrow mode such as L, and a later frame of the same dimensions switches to a...
OESA-2026-4520 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: When a printer is added or modified with a model PPD, the cupsd...
OESA-2026-4518 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: When a printer is added or modified with a model PPD, the cupsd...
OESA-2026-4519 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: When a printer is added or modified with a model PPD, the cupsd...
OESA-2026-4517 cups security update
CUPS is the standards-based, open source printing system developed by Apple Inc. for UNIX®-like operating systems. CUPS uses the Internet Printing Protocol IPP to support printing to local and network printers. Security Fixes: When a printer is added or modified with a model PPD, the cupsd...
OESA-2026-4512 rpm security update
The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. Thi...
OESA-2026-4511 rpm security update
The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. Thi...
OESA-2026-4510 rpm security update
The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpm. An attacker can exploit a command injection vulnerability by influencing the path or filename of a tarball processed by rpmbuild -t to include shell metacharacters. Thi...
OESA-2026-4508 gdb security update
GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contai...
OESA-2026-4507 gdb security update
GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contai...
OESA-2026-4506 gdb security update
GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contai...
OESA-2026-4505 gdb security update
GDB, the GNU Project debugger, allows you to see what is going on inside another program while it executes -- or what another program was doing at the moment it crashed. Security Fixes: A flaw was found in GDB's STABS debug format parser. The readmemberfunctions function in gdb/stabsread.c contai...
CVE-2026-89410
In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive information...
CVE-2026-66281
In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable exit condition infinite loop. These messages must come from a device that has already joined the network. Only devices supporting manufacturer-specific clusters are impacted...
openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw
A flaw was found in OpenSSH. The internal-sftp component within sshd incorrectly processes command-line arguments, recognizing only the first nine. This limitation can prevent the application of intended security configurations for SFTP SSH File Transfer Protocol connections, potentially leading ...
Azure Pipelines Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Azure Pipelines allows an unauthorized attacker to execute code over a network...