27979 matches found
CVE-2026-17544
PHP core: vulnerability CVE-2026-17544 involves bccomp() receiving attacker-provided inputs that can trigger an out-of-bounds write, causing stack and heap corruption. Affected versions are PHP 8.4.* before 8.4.24 and 8.5.* before 8.5.9. The CVSS score is 9.3 (CRITICAL) with network attack vector...
EUVD-2026-51091
Attacker-provided inputs to bccomp could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4. before 8.4.24 and from 8.5. before 8.5.9...
RHSA-2026:48034 Red Hat Security Advisory: nodejs24 security update
Bulletin has no description...
CVE-2026-16971
The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...
CVE-2026-16970
The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...
CVE-2026-16969 DFIR-IRIS Stored XSS in Assets
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the assets function...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.70 bug fix and security update
Red Hat OpenShift Container Platform release 4.14.70 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...
org.apache.camel/camel-mail: Apache Camel Mail Component: Credential exposure and information disclosure via improper input validation of mail headers
A flaw was found in the Apache Camel Mail Component. This vulnerability, due to improper input validation, allows a remote attacker to exploit routes that channel untrusted input into the mail producer without proper header stripping. Before version 4.19.0, this could lead to the redirection of...
CLEANSTART-2026-ZU41550 Security fixes in elastic-beats 9.3.7-r0
Package elastic-beats version 9.3.7-r0 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...
CLEANSTART-2026-IL03064 Security fixes in minio-operator 6.0.4-r3
Package minio-operator version 6.0.4-r3 fixes 4 vulnerabilities: ghsa-mh63-6h87-95cp, ghsa-29wx-vh33-7x7r, CVE-2025-30204, CVE-2024-51744...
CLEANSTART-2026-BF59911 Security fixes in az 2.83.0-r2
Package az version 2.83.0-r2 fixes 4 vulnerabilities: CVE-2026-48524, CVE-2026-48522, CVE-2026-48525, CVE-2026-48526...
CLEANSTART-2026-RB64166 Security fixes in redis 8.0.4-r0
Package redis version 8.0.4-r0 fixes 4 vulnerabilities: CVE-2025-49844, CVE-2025-46817, CVE-2025-46818, CVE-2025-46819...
CLEANSTART-2026-YP51854 Security fixes in cloudprober 0.12.9-r0
Package cloudprober version 0.12.9-r0 fixes 4 vulnerabilities: CVE-2025-22868, CVE-2026-33186, ghsa-m425-mq94-257g, CVE-2024-24786...
CLEANSTART-2026-YB33858 Security fixes in trillian 1.7.2-r0
Package trillian version 1.7.2-r0 fixes 4 vulnerabilities: CVE-2025-61730, CVE-2025-61728, CVE-2025-61726, CVE-2025-68121...
CLEANSTART-2026-EQ22417 Security fixes in curl 7.78.0-r0
Package curl version 7.78.0-r0 fixes 4 vulnerabilities: CVE-2021-22922, CVE-2021-22923, CVE-2021-22924, CVE-2021-22925...
CLEANSTART-2026-ID39786 Security fixes in postgresql 15.4-r0
Package postgresql version 15.4-r0 fixes 2 vulnerabilities: CVE-2023-39418, CVE-2023-39417...
CLEANSTART-2026-NL91750 Security fixes in argo-workflows 4.0.3-r0
Package argo-workflows version 4.0.3-r0 fixes 1 vulnerabilities: CVE-2026-33186...
CLEANSTART-2026-RZ01875 Security fixes in argo-cd-fips 3.1.12-r1
Package argo-cd-fips version 3.1.12-r1 fixes 4 vulnerabilities: CVE-2026-24051, CVE-2025-68121, CVE-2025-61732, CVE-2026-25934...