58735 matches found
Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses pyasn1 which is vulnerable to CVE-2026-30922
Summary IBM Maximo Application Suite - Visual Inspection component uses pyasn1 which is vulnerable to CVE-2026-30922, This bulletin contains information regarding the vulnerability and its remediation. Vulnerability Details CVEID:CVE-2026-30922 DESCRIPTION: pyasn1 is a generic ASN.1 library for...
EUVD-2026-27231
A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions involving dropped packets and out-of-order sequence counters, the server may incorrectly process fragmented data chunks. If a sequence reset notificatio...
CVE-2026-40797
creationtimestamp| type| source ---|---|--- 2026-05-05 07:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116520794744579709 2026-05-05 07:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3ml3o4sriyd2j 2026-05-05 08:01:19+00:00| seen|...
CVE-2026-6180
A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices. Under specific network conditions involving dropped packets and out-of-order sequence counters, the server may incorrectly process fragmented data chunks. If a sequence reset notificatio...
CVE-2026-23866
creationtimestamp| type| source ---|---|--- 2026-05-05 07:11:11+00:00| seen| https://www.acn.gov.it/portale/w/whatsapp-rilevate-vulnerabilita-in-versioni-per-windows-e-ios/android 2026-05-05 11:44:26+00:00| seen| https://bsky.app/profile/securestep9.bsky.social/post/3ml44ctvsok2g 2026-05-05...
SUSE CVE-2026-31778
In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: fix stack out-of-bounds read in initcard The loop creates a whitespace-stripped copy of the card shortname where len id is used for the bounds check. Since sizeofcard-id is 16 and the local id buffer is also 16 bytes...
GHSA-M7PR-HJQH-92CM
creationtimestamp| type| source ---|---|--- 2026-05-05 01:40:28+00:00| seen| https://gist.github.com/alon710/f7e9943ac304fddb338906da41495cb0...
GHSA-445Q-VR5W-6Q77
creationtimestamp| type| source ---|---|--- 2026-05-05 01:10:29+00:00| seen| https://gist.github.com/alon710/f60cd3417122b17fedb1824de3dd0f54...
EUVD-2026-27153
A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Tenant Handler. The manipulation of the argument ID results in authorization bypass. The attack may be performed from...
GHSA-GXXH-8VCJ-W2MH
creationtimestamp| type| source ---|---|--- 2026-05-05 00:10:29+00:00| seen| https://gist.github.com/alon710/8bb704e5f538c265ec11484d13063fb4...
CVE-2026-34408
An issue was discovered in Gambio 4.9.2.0 patched in 2024-02 v1.0.0 for GX4 v4.0.0.0 to v4.9.2.0. The password reset function can be bypassed to set arbitrary passwords for arbitrary accounts if the ID is known...
D-Link DI-8100 缓冲区错误漏洞
The D-Link DI-8100 is a wireless broadband router designed for small and medium-sized network environments by D-Link Corporation. The D-Link DI-8100 version 16.07.26A1 contains a buffer error vulnerability. This vulnerability arises from the function sprintf in the file yyxz.asp, where the handli...
PT-2026-37274
Name of the Vulnerable Software and Affected Versions Grav versions prior to 2.0.0-beta.2 Description A path traversal issue exists within the FormFlash core component. An unauthenticated attacker can manipulate the session id passed via the form-flash-id parameter in POST requests to traverse th...
PT-2026-37073
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter verifier where the dst reg-id is not reset to 0 during a BPF END byte swap operation. When a register undergoes this operation, its scal...
ROS-20260505-73-0028
A vulnerability in the appendChild and clearidcache functions of the Python programming language interpreter CPython is related to algorithmic complexity. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
LangChain-Chatchat 加密问题漏洞
LangChain-Chatchat is a chatbot software developed based on the LangChain framework, open-sourced by Chatchat-Space. Versions of LangChain-Chatchat 0.3.1.3 and earlier had an encryption vulnerability. This vulnerability stems from a function in the Uploaded File Handler component, specifically th...
Fedora 42 : rust-sequoia-git (2026-6f64d2e143)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6f64d2e143 advisory. Update to version 0.6.0. Addresses RUSTSEC-2026-0109. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...
VulnCheck KEV: CVE-2026-0300
A buffer overflow vulnerability in the User-ID™ Authentication Portal aka Captive Portal service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. T...
ROS-20260505-73-0029
A vulnerability in the appendChild and clearidcache functions of the Python programming language interpreter CPython is related to algorithmic complexity. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...
ROS-20260505-73-0026
A vulnerability in the appendChild and clearidcache functions of the Python programming language interpreter CPython is related to algorithmic complexity. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...