17086 matches found
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.11 Vulnerability Details CVEID:CVE-2020-28851 DESCRIPTION: In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. x/text/language is supposed to...
CLSA-2026-1784596288 TuxCare security update for connect (1 CVE)
TuxCare rebuilt connect to address 1 CVE. Fixed in 2.12.0-tuxcare.1...
CLSA-2026-1774225190 TuxCare security update for connect (3 CVEs)
TuxCare rebuilt connect to address 3 CVEs. Fixed in 1.9.2-tuxcare.1...
CLSA-2026-1774225192 TuxCare security update for connect (3 CVEs)
TuxCare rebuilt connect to address 3 CVEs. Fixed in 2.7.5-tuxcare.1...
CLSA-2026-1774225191 TuxCare security update for connect (3 CVEs)
TuxCare rebuilt connect to address 3 CVEs. Fixed in 2.6.0-tuxcare.1...
CLSA-2026-1773533800 TuxCare security update for basic-auth-connect (1 CVE)
TuxCare rebuilt basic-auth-connect to address 1 CVE. Fixed in 1.0.0-tuxcare.1...
Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave)
SummaryThe Socket.IO server is configured with alwaysconnect=True lines 78, 91 in backend/openwebui/socket/main.py and the connect handler line 329 never rejects unauthenticated connections. Two Ydoc event handlers have zero authentication checks, allowing unauthenticated clients to interact with...
CVE-2026-18569
A flaw was found in the backchannel logout endpoint of the keycloak-services component, which is part of the Red Hat Build of Keycloak. This component handles authentication and session management for applications. The issue occurs when an OIDC identity provider is configured to skip signature...
CVE-2026-18569 Keycloak-services: keycloak-services: oidc backchannel logout accepts unsigned forged logout tokens
A flaw was found in the backchannel logout endpoint of the keycloak-services component, which is part of the Red Hat Build of Keycloak. This component handles authentication and session management for applications. The issue occurs when an OIDC identity provider is configured to skip signature...
CVE-2026-18569
A flaw was found in the backchannel logout endpoint of the keycloak-services component, which is part of the Red Hat Build of Keycloak. This component handles authentication and session management for applications. The issue occurs when an OIDC identity provider is configured to skip signature...
CVE-2026-18569
The vulnerability CVE-2026-18569 affects the Red Hat Build of Keycloak, specifically the keycloak-services component’s backchannel logout endpoint. The root cause is when an OIDC identity provider is configured to skip signature validation, causing the system to accept logout requests with no cry...
CVE-2026-18569
A flaw was found in the backchannel logout endpoint of the keycloak-services component, which is part of the Red Hat Build of Keycloak. This component handles authentication and session management for applications. The issue occurs when an OIDC identity provider is configured to skip signature...
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.11 Vulnerability Details CVEID:CVE-2020-28851 DESCRIPTION: In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. x/text/language is supposed to...
PT-2026-73976
TuxCare rebuilt basic-auth-connect to address 1 CVE. Fixed in 1.0.0-tuxcare.1...
PT-2026-75511
TuxCare rebuilt connect to address 1 CVE. Fixed in 2.12.0-tuxcare.1...
The vulnerability of the http_proxy_connect() function in the RDP client FreeRDP allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the httpproxyconnect function in the RDP client FreeRDP is related to the lack of handling for CRLF sequences in HTTP headers when processing the variable ServerHostname. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...
PT-2026-74069
TuxCare rebuilt connect to address 3 CVEs. Fixed in 2.7.5-tuxcare.1...
PT-2026-74068
TuxCare rebuilt connect to address 3 CVEs. Fixed in 2.6.0-tuxcare.1...