399146 matches found
EUVD-2026-109666
MISP mispguard is a security filtering proxy that inspects and blocks MISP feed responses based on configured rules. The processfeedresponse method in src/mispguard.py was responsible for evaluating feed responses before they reached the MISP instance. The original logic only explicitly handled t...
CVE-2026-116372 MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rules
MISP mispguard is a security filtering proxy that inspects and blocks MISP feed responses based on configured rules. The processfeedresponse method in src/mispguard.py was responsible for evaluating feed responses before they reached the MISP instance. The original logic only explicitly handled t...
webkitgtk: Visiting a maliciously crafted website may leak sensitive data
A flaw was found in WebKitGTK. Visiting a malicious website may lead to a sensitive data leak due to improper validation checks...
chromium-browser: skia: chromium-browser: skia: Cross-origin data leakage via uninitialized use
A flaw was found in Skia in Google Chrome. This uninitialized use vulnerability allows a remote attacker, who has already compromised the renderer process, to craft a malicious HTML page. Successful exploitation can lead to the leakage of sensitive cross-origin data...
chromium-browser: angle: ANGLE in Google Chrome: Cross-origin data disclosure via uninitialized resource
A flaw was found in ANGLE in Google Chrome. An uninitialized resource vulnerability exists that allows a remote attacker to potentially obtain cross-origin data by enticing a user to visit a crafted HTML page...
Security Bulletin:Vulnerability in netty-codec-redis may affect IBM Infosphere Change Data Capture (CVE-2026-93572)
Summary A security vulnerability has been identified in netty-codec-redis, Netty/Codec/Redis. netty-codec-redis is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...
Security Bulletin:Multiple vulnerabilities in netty-codec-smtp may affect IBM Infosphere Change Data Capture (CVE-2026-93563, CVE-2026-93576)
Summary Multiple security vulnerabilities have been identified in netty-codec-smtp, Netty/Codec/SMTP. netty-codec-smtp is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...
Security Bulletin:Multiple vulnerabilities in netty-codec-stomp may affect IBM Infosphere Change Data Capture (CVE-2026-93494, CVE-2026-93560)
Summary Multiple security vulnerabilities have been identified in netty-codec-stomp, Netty/Codec/Stomp. netty-codec-stomp is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...
Security Bulletin:Vulnerability in netty-codec-memcache may affect IBM Infosphere Change Data Capture (CVE-2026-93561)
Summary A security vulnerability has been identified in netty-codec-memcache, . netty-codec-memcache is used by IBM Infosphere Change Data Capture. IBM has addressed this vulnerability. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability Details...
Security Bulletin:Multiple vulnerabilities in bcpkix-jdk18on may affect IBM Infosphere Change Data Capture (CVE-2026-17508, CVE-2026-18036)
Summary Multiple security vulnerabilities have been identified in bcpkix-jdk18on, the Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. bcpkix-jdk18on is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the...
Security Bulletin:Multiple vulnerabilities in lz4-java may affect IBM Infosphere Change Data Capture (CVE-2026-106449, CVE-2026-106450, CVE-2026-106451)
Summary Multiple security vulnerabilities have been identified in lz4-java, Java bindings and pure Java implementations of LZ4 and XXHash. lz4-java is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediatio...
BIT-PILLOW-2026-112395 Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)
Pillow is a Python imaging library. From 8.2.0 until 13.0.0, Pillow's tiled-TIFF decoder can read past the tile buffer while copying four-byte pixels. In decodeTile, libtiff can return a tile allocation smaller than the required row stride multiplied by the tile length, and Pillow's stride-and-co...
CVE-2025-61638
CVE-2025-61638 node . "https://www.mediawiki.org/w/api.php" fixed More exploitable targets can be found at https://www.mediawiki.org/wiki/SitesusingMediaWiki. https://phabricator.wikimedia.org/T401099 https://vulners.com/cve/CVE-2025-61638 XSS attack requires editing entries, so at least xss !==...
Malicious code in @greenlake/mfe-login-url (npm)
@greenlake/mfe-login-url is a dependency-confusion package: it is described as a "Compatibility shim", uses inflated version numbers, and its README calls it an "authorized dependency-confusion test". Each listed version 2.0.0, 1.0.0, 3.0.0 has a postinstall script that runs node beacon.cjs on np...
libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation
A flaw in libxml2's xmlXPtrEvalXPtrPart function allows a local attacker to cause a heap-based buffer overflow. An integer overflow while processing an oversized xpointer expression leads to incorrect memory allocation and an out-of-bounds write, potentially resulting in information disclosure,...
libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks
An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...
openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy
A flaw was found in OpenSSH, a widely used tool for secure remote access. When a user attempts to copy files between two different remote systems using the scp command, the file might be incorrectly placed in a directory above the intended destination. This unintended file placement could lead to...
libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation
A flaw in libxml2's xmlXPtrEvalXPtrPart function allows a local attacker to cause a heap-based buffer overflow. An integer overflow while processing an oversized xpointer expression leads to incorrect memory allocation and an out-of-bounds write, potentially resulting in information disclosure,...
libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks
An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...
Important: Red Hat Security Advisory: flatpak security update
An update for flatpak is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...