54268 matches found
CVE-2026-44253
CVE-2026-44253 affects the Wazuh cluster protocol in framework/wazuh/core/cluster/common.py, allowing an authenticated cluster node to exhaust memory on the master. The root cause is twofold: the receive_str() method accepts an attacker-controlled total for InBuffer without a maximum, enabling a ...
Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in brace-expansion
Summary SPSS Collaboration and Deployment Services is affected by vulnerabilities in brace-expansion. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-69152 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and...
CVE-2026-62672
Grav (file-based web platform) prior to 2.0.4 is vulnerable to an authenticated ReDoS via the regex_replace filter and function in the Twig content sandbox. The root cause is that GravExtension::regexReplace() passes an editor-controlled pattern directly to PHP's preg_replace() without sanitizati...
MINI-V8G4-5VGQ-88RR
Bulletin has no description...
kernel: ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach()
A flaw was found in the Linux kernel's IPv6 ICMP error generation. A remote attacker could send a specially crafted IPv4 ICMP error packet with a Common Internet Protocol Security Option CIPSO IP option. This could lead to incorrect handling of packet control block data when generating an IPv6 IC...
kernel: netfilter: flowtable: strictly check for maximum number of actions
A flaw was found in the Netfilter flowtable component of the Linux kernel. This vulnerability occurs because the system does not strictly check the maximum number of hardware offload actions for IPv6, allowing it to process more actions than supported. This could potentially lead to system...
EUVD-2026-62534
Grav is a file-based Web platform. Prior to 2.0.1, Grav ZipArchiver::extract in system/src/Grav/Common/Filesystem/ZipArchiver.php passes archives to ZipArchive::extractTo without enforcing the system.gpm.archive uncompressed-size, file-count, or nesting-depth limits. Code using...
CVE-2026-14970
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow...
CVE-2026-14970
The NIM server process in AIX 7.2/7.3 and PowerVM VIOS 4.1 crashes during client registration due to a buffer overflow, exploitable over the network with no authentication. CVSS 7.5 (HIGH) reflects high availability impact; no confidentiality or integrity impact is noted. IBM support page: https:...
EUVD-2026-62516
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow...
EUVD-2026-62491
Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory 6.2.3 - Pagination values were not strictly typed. Array/non-numeric values for example limitstart could trigger PHP type errors in arithmetic, and limit was not validated before use in list...
MINI-M4M6-J3WM-M576
Bulletin has no description...
Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent
Summary Vulnerabilities in IBM SDK Java Technology Edition that is shipped as part of agent framework in ITCAM for Applications WebSphere MQ Monitoring Agent. CVEs: CVE-2026-41254, CVE-2026-47057, CVE-2026-47058, CVE-2026-47063 and CVE-2026-8400 Vulnerability Details CVEID:CVE-2026-47057...
CVE-2026-76245
stigmem pip package stigmem-node version 0.9.0a1 contains a timestamp-handling mismatch in federation peer-token validation that can cause valid peer tokens to be incorrectly treated as expired. This affects the availability and reliability of authenticated federation flows on nodes using...
MINI-4HCJ-W92V-VHR2
Bulletin has no description...
MINI-C966-WJFG-79XQ
Bulletin has no description...
CVE-2026-76238
stigmem before 0.9.0a12 has a BOLA flaw in the decay sweep endpoint. Authenticated attackers with write access to one tenant can POST with ttl_seconds=0 to expire facts across all tenants, or use dry_run to retrieve cross-tenant fact counts and existence data. CVSS 4.0 scores 7.2 HIGH (integrity ...
MINI-HM6M-52WH-8H85
Bulletin has no description...