52505 matches found
EUVD-2026-62534
Grav is a file-based Web platform. Prior to 2.0.1, Grav ZipArchiver::extract in system/src/Grav/Common/Filesystem/ZipArchiver.php passes archives to ZipArchive::extractTo without enforcing the system.gpm.archive uncompressed-size, file-count, or nesting-depth limits. Code using...
CVE-2026-14970
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow...
CVE-2026-14970
The NIM server process in AIX 7.2/7.3 and PowerVM VIOS 4.1 crashes during client registration due to a buffer overflow, exploitable over the network with no authentication. CVSS 7.5 (HIGH) reflects high availability impact; no confidentiality or integrity impact is noted. IBM support page: https:...
EUVD-2026-62516
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM server process is crashing during client registration due to buffer overflow...
EUVD-2026-62491
Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory 6.2.3 - Pagination values were not strictly typed. Array/non-numeric values for example limitstart could trigger PHP type errors in arithmetic, and limit was not validated before use in list...
Security Bulletin: Vulnerabilities in IBM Java included with IBM Tivoli Composite Application Manager for Applications WebSphere MQ Monitoring Agent
Summary Vulnerabilities in IBM SDK Java Technology Edition that is shipped as part of agent framework in ITCAM for Applications WebSphere MQ Monitoring Agent. CVEs: CVE-2026-41254, CVE-2026-47057, CVE-2026-47058, CVE-2026-47063 and CVE-2026-8400 Vulnerability Details CVEID:CVE-2026-47057...
CVE-2026-76245
stigmem pip package stigmem-node version 0.9.0a1 contains a timestamp-handling mismatch in federation peer-token validation that can cause valid peer tokens to be incorrectly treated as expired. This affects the availability and reliability of authenticated federation flows on nodes using...
CVE-2026-76238
stigmem before 0.9.0a12 has a BOLA flaw in the decay sweep endpoint. Authenticated attackers with write access to one tenant can POST with ttl_seconds=0 to expire facts across all tenants, or use dry_run to retrieve cross-tenant fact counts and existence data. CVSS 4.0 scores 7.2 HIGH (integrity ...
MINI-4M4M-MM8P-M89C
Bulletin has no description...
MINI-23PW-QW2M-C849
Bulletin has no description...
MINI-4H5W-H3GX-VM88
Bulletin has no description...
MINI-7VJ6-F4XC-X258
Bulletin has no description...
MINI-WGJR-J6H2-7QGH
Bulletin has no description...
MINI-7WJG-G4CH-J3RR
Bulletin has no description...
CVE-2026-74338
A flaw was found in the Linux kernel's Berkeley Packet Filter BPF subsystem. A local attacker could bypass security checks by directly using the bpf2 system call to load a sleepable BPFLSMCGROUP program. This could lead to a kernel crash, resulting in a Denial of Service DoS on the affected syste...
mysql: JSON unspecified vulnerability (CPU Jul 2026)
Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: JSON. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily...
mysql: X Plugin unspecified vulnerability (CPU Jul 2026)
Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: X Plugin. Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily...
CVE-2026-66273
A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit a vulnerability in how the software handles type sizes and counts. This could lead to excessive memory allocation, causing the system to become unresponsive and resulting in a denial of...
ROOT-APP-NPM-CVE-2024-30261 CVE-2024-30261 in undici - Patched by Root
Root has patched CVE-2024-30261 in the undici package for Root:npm. Multiple fixed versions available...
CVE-2026-74357
A flaw was found in the drm/amdgpu component of the Linux kernel. This vulnerability involves a race condition during the processing of GPU ring data within the amdgpucoredump function. This can lead to a memory corruption issue, specifically a slab-out-of-bounds write. A local attacker could...