PT-2026-80895

RansomLook contains a stored cross-site scripting XSS vulnerability in the cryptocurrency wallet detail view. Cryptocurrency addresses and blockchain names originating from external sources, including the public crowd-sourced ransomwhe.re feed, were stored without sufficient validation and later...

RHEL 9 : assertj-core (RHSA-2026:58949)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58949 advisory. A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ:...

RHEL 9 : assertj-core (RHSA-2026:58956)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58956 advisory. A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ:...

RHEL 9 : assertj-core (RHSA-2026:58957)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:58957 advisory. A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ:...

CVE-2014-0225

CVE-2014-0225...

CVE-2026-12710

CVE-2026-12710 is a Missing Authorization vulnerability in the QueryEngineTask component of Google Cloud Application Integration , affecting versions from 2025-04-28 to 2026-04-04. An external attacker with no privileges or user interaction can access sensitive internal data over the network. The...

EUVD-2026-64241

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration versions from 2025-04-28 to 2026-04-04 allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required...

CVE-2026-12710 Missing Authorization in Application Integration QueryEngineTask

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration versions from 2025-04-28 to 2026-04-04 allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required...

SUSE CVE-2026-76641

Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XMLExternalEntityParserCreate. A struct size mismatch between ELEMENTTYPE members causes storeAtts to read the attIndex...

PT-2026-79519

A Missing Authorization vulnerability in the QueryEngineTask of Google Cloud Application Integration versions from 2025-04-28 to 2026-04-04 allows an external attacker to access sensitive internal data. The issue was patched on April 4, 2026; no customer action is required...

UBUNTU-CVE-2026-49114

In ONNX before 1.21.0, the 'saveexternaldata' function builds the external-data file path from the model's externaldata location field and opens it for writing without 'ONOFOLLOW/OEXCL', after a non-atomic 'os.path.isfile' check. A local attacker with write access to the directory where a victim...

nginx: Fix of CVE-2026-49975

CVE-2026-49975: improve the maxheaders patch to preserve binary compatibility with externally-built nginx modules...

CVE-2026-76158 Datiphy Data Management Center - External Control of File Name or Path

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences...

CVE-2026-76158

Datiphy Data Management Center (v8.3.0 through v8.5.1) contains a path traversal vulnerability in its upload API endpoint. An unauthenticated remote attacker can supply relative or absolute path sequences to write files to arbitrary locations outside the intended upload directory, enabling arbitr...

CVE-2026-76158: External Control of File Name or Path

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences...

CVE-2026-54134: External Control of File Name or Path

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse request parameters differently, allowing an attacker with FILEUPLOAD permission to inject reserved internal upload fields...

Linux Distros Unpatched Vulnerability : CVE-2026-76641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parse...

CVE-2026-76641

Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XMLExternalEntityParserCreate. A struct size mismatch between ELEMENTTYPE members causes storeAtts to read the attIndex...

ALPINE-CVE-2026-76641

Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XMLExternalEntityParserCreate. A struct size mismatch between ELEMENTTYPE members causes storeAtts to read the attIndex...

AZL-96932 CVE-2026-76641 affecting package expat for versions less than 2.8.3-2

Expat through 2.8.3 contains an out-of-bounds read vulnerability that allows attackers to trigger memory corruption by processing XML with external entity parsers created via XMLExternalEntityParserCreate. A struct size mismatch between ELEMENTTYPE members causes storeAtts to read the attIndex...