1220 matches found
CLSA-2026-1779410882 TuxCare security update for commons-fileupload:commons-fileupload (2 CVEs)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.2.1-tuxcare.3...
CLSA-2026-1779410887 TuxCare security update for commons-fileupload:commons-fileupload (1 CVE)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 1 CVE. Fixed in 1.2.2-tuxcare.4...
CLSA-2026-1777509603 TuxCare security update for commons-fileupload:commons-fileupload (1 CVE)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 1 CVE. Fixed in 1.2.2-tuxcare.2...
CLSA-2026-1777509601 TuxCare security update for commons-fileupload:commons-fileupload (1 CVE)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 1 CVE. Fixed in 1.5-tuxcare.2...
CLSA-2026-1776040406 TuxCare security update for commons-fileupload:commons-fileupload (3 CVEs)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 3 CVEs. Fixed in 1.2.1-tuxcare.1...
CLSA-2026-1776040405 TuxCare security update for commons-fileupload:commons-fileupload (3 CVEs)
TuxCare rebuilt commons-fileupload:commons-fileupload to address 3 CVEs. Fixed in 1.2.2-tuxcare.1...
PT-2026-74648
TuxCare rebuilt commons-fileupload:commons-fileupload to address 1 CVE. Fixed in 1.5-tuxcare.2...
PT-2026-74650
TuxCare rebuilt commons-fileupload:commons-fileupload to address 1 CVE. Fixed in 1.2.2-tuxcare.2...
PT-2026-74829
TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.2.2-tuxcare.3...
PT-2026-74846
TuxCare rebuilt commons-fileupload:commons-fileupload to address 1 CVE. Fixed in 1.2.2-tuxcare.4...
PT-2026-74842
TuxCare rebuilt commons-fileupload:commons-fileupload to address 2 CVEs. Fixed in 1.2.1-tuxcare.3...
PT-2026-74420
TuxCare rebuilt commons-fileupload:commons-fileupload to address 3 CVEs. Fixed in 1.2.1-tuxcare.1...
PT-2026-74419
TuxCare rebuilt commons-fileupload:commons-fileupload to address 3 CVEs. Fixed in 1.2.2-tuxcare.1...
PT-2026-74673
TuxCare rebuilt commons-fileupload:commons-fileupload to address 1 CVE. Fixed in 1.2.1-tuxcare.2...
CVE-2026-1771 MapSVG <= 8.14.0 - Authenticated (Administrator+) Arbitrary File Upload via '/mapsvg/v1/svgfile' Endpoint
The MapSVG plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the SVGFile constructor in all versions up to, and including, 8.14.0 This is due to an incorrect conditional check that prevents file validation from taking place. This makes it possible...
Duplicate Advisory: TYPO3-CORE-SA-2026-020: TYPO3 CMS - Unrestricted File Upload in Form Framework
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-mfqj-cqv3-h7xw. This link is maintained to preserve external references. Original Description Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with...
CVE-2026-15305
Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with allowedMimeTypes configured. The restriction was not enforced server-side because the MimeTypeValidator was registered during form building before concrete form definition properties...
CVE-2026-15305: Insufficient Type Distinction
Users were able to upload files with arbitrary MIME types to forms using FileUpload or ImageUpload elements with allowedMimeTypes configured. The restriction was not enforced server-side because the MimeTypeValidator was registered during form building before concrete form definition properties...
Security Bulletin: Due to IBM Storage Scale, IBM Cloud Pak System is affected by multiple vulnerabilities [CVE-2025-48976, CVE-2025-30204, CVE-2025-1137].
Summary Execute privileged command and denial of service vulnerabilities found in IBM Storage Scale previously known as IBM Spectrum Scale affect IBM Cloud Pak System. These vulnerabilities were addressed in IBM Cloud Pak System v2.3.6.1 and IBM Cloud Pak System v2.3.5.1 Vulnerability Details...
Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak System
Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.1 and IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2025-0395 DESCRIPTION: When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for...