398126 matches found
CVE-2026-97691 Convex: Unauthorized data access
Convex is an open-source reactive database for application developers. Prior to the self-hosted image published on August 10, 2026 and local deployment binary precompiled-2026-08-10-c0cb7ae, a malicious user can, in rare cases, perform unauthorized reading of deployment information from a Convex...
CVE-2026-97691
The open-source reactive database Convex is affected by a vulnerability that could allow a malicious user to perform unauthorized reading of deployment information in rare cases. The maintainer has withheld specific technical details and affected components to protect unpatched self-hosted enviro...
CVE-2026-97691 Convex: Unauthorized data access
Convex is an open-source reactive database for application developers. Prior to the self-hosted image published on August 10, 2026 and local deployment binary precompiled-2026-08-10-c0cb7ae, a malicious user can, in rare cases, perform unauthorized reading of deployment information from a Convex...
CVE-2026-97691 Convex: Unauthorized data access
Convex is an open-source reactive database for application developers. Prior to the self-hosted image published on August 10, 2026 and local deployment binary precompiled-2026-08-10-c0cb7ae, a malicious user can, in rare cases, perform unauthorized reading of deployment information from a Convex...
CVE-2026-109575
In HAProxy Data Plane API 2.2.0 through 3.4.3 and corresponding Enterprise Edition releases, Server.ConfigureAPI has process-global authentication logic that improperly drops security controls across multiple transport types. When a TLS Certificate Authority tlsca is configured and a numeric TLS...
CVE-2026-109575
HAProxy Data Plane API versions 2.2.0 through 3.4.3 (including Enterprise Edition releases) are vulnerable to a security control bypass in the Server.ConfigureAPI() function. When a TLS Certificate Authority (tls_ca ) and a numeric TLS port (tls_port ) are configured, the application globally dis...
EUVD-2026-97816
In HAProxy Data Plane API 2.2.0 through 3.4.3 and corresponding Enterprise Edition releases, Server.ConfigureAPI has process-global authentication logic that improperly drops security controls across multiple transport types. When a TLS Certificate Authority tlsca is configured and a numeric TLS...
CVE-2026-109575
In HAProxy Data Plane API 2.2.0 through 3.4.3 and corresponding Enterprise Edition releases, Server.ConfigureAPI has process-global authentication logic that improperly drops security controls across multiple transport types. When a TLS Certificate Authority tlsca is configured and a numeric TLS...
CVE-2026-109575
In HAProxy Data Plane API 2.2.0 through 3.4.3 and corresponding Enterprise Edition releases, Server.ConfigureAPI has process-global authentication logic that improperly drops security controls across multiple transport types. When a TLS Certificate Authority tlsca is configured and a numeric TLS...
CVE-2026-109575
In HAProxy Data Plane API 2.2.0 through 3.4.3 and corresponding Enterprise Edition releases, Server.ConfigureAPI has process-global authentication logic that improperly drops security controls across multiple transport types. When a TLS Certificate Authority tlsca is configured and a numeric TLS...
CVE-2026-87744
A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security controls on generated endpoints. When a developer customizes a specific operation using @MethodProperties without explicitly re-declaring security roles, the code generator silent...
CLSA-2026-1791832293 zlib: Fix of CVE-2026-76844
CVE-2026-76844: reset strm.nextin and strm.availin in gzwrite when a direct write fails, so a later gzwrite after gzclearerr cannot copy past the input buffer...
CLSA-2026-1791831177 exim: Fix of CVE-2026-94056
CVE-2026-94056: read the full Proxy Protocol v2 header before using its length field, avoiding use of uninitialised stack data...
MGASA-2026-0482 Updated ntfs-3g package fixes security vulnerabilities
Heap buffer overflow in ntfsaclowner Heap buffer overflow in ntfssamesid Denial-of-service in ntfsinodeattachallextents Heap buffer overflow in ntfscheckrestartarea Heap buffer overflow in ntfseacheckwsldev Heap buffer overflow in ntfsexternalattrfind Heap data corruption in...
Updated ntfs-3g package fixes security vulnerabilities
Heap buffer overflow in ntfsaclowner Heap buffer overflow in ntfssamesid Denial-of-service in ntfsinodeattachallextents Heap buffer overflow in ntfscheckrestartarea Heap buffer overflow in ntfseacheckwsldev Heap buffer overflow in ntfsexternalattrfind Heap data corruption in...
CVE-2026-87744 Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations
A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security controls on generated endpoints. When a developer customizes a specific operation using @MethodProperties without explicitly re-declaring security roles, the code generator silent...
CVE-2026-87744
A security flaw in Quarkus REST Data Panache allows unauthenticated attackers to bypass security controls on generated endpoints. The vulnerability occurs when a developer customizes an operation using @MethodProperties without explicitly re-declaring security roles; the code generator silently d...
EUVD-2026-97766
A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security controls on generated endpoints. When a developer customizes a specific operation using @MethodProperties without explicitly re-declaring security roles, the code generator silent...
CVE-2026-87744
A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security controls on generated endpoints. When a developer customizes a specific operation using @MethodProperties without explicitly re-declaring security roles, the code generator silent...
CVE-2026-87744 Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations
A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security controls on generated endpoints. When a developer customizes a specific operation using @MethodProperties without explicitly re-declaring security roles, the code generator silent...