CVE-2026-14978 Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions

HashiCorp go-slug 0.4.0 through 0.18.2 could allow a local attacker to bypass .terraformignore exclusions and cause sensitive files to be included in Terraform slug uploads due to improper handling of Unicode normalization during path matching...

CVE-2026-42527

A flaw was found in Apache Camel. This deserialization of untrusted data vulnerability allows a remote attacker to trigger out-of-band DNS queries to an attacker-controlled host. By sending a specially crafted Java-serialized payload to an affected Camel consumer, the system's Java Virtual Machin...

CVE-2026-17015 IBM i Denial of Service

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...

CVE-2026-17015

IBM i versions 7.3 through 7.6 are affected by an out-of-bounds read (CWE-125) in the 5770-SS1 feature, allowing a remote authenticated attacker to cause a denial of service and obtain sensitive information. IBM rates the vulnerability CVSS 5.4 (MEDIUM) while the NVD assigns 8.1 (HIGH) , reflecti...

EUVD-2026-62854

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service and obtain sensitive information due to an out-of-bounds read...

GHSA-QX7J-JV8M-FPPR vulnerabilities

Vulnerabilities for packages: conductor, conductor-fips, logstash-fips, druid, nuxeo, thingsboard, zipkin, cassandra-reaper, logstash...

GHSA-6G32-PXV4-2WFJ vulnerabilities

Vulnerabilities for packages: conductor, conductor-fips, logstash-fips, druid, nuxeo, thingsboard, zipkin, cassandra-reaper, logstash, traccar, traccar-fips...

CVE-2026-17106 vulnerabilities

Vulnerabilities for packages: buildah, docker-cli-buildx, openbao, buildkitd, kaniko, docker-fips, kaniko-fips, skaffold-fips, kubescape-server, buildah-fips, podman-fips, kubescape, docker-cli-buildx-fips, skaffold, openbao-fips, buildkitd-fips, ctop-fips, podman, kubescape-server-fips, telegraf...

GHSA-PCW8-M77R-2528 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

GHSA-JCQV-RJ94-JMX3 vulnerabilities

Vulnerabilities for packages: busybox...

GHSA-5XWG-CFVJ-GFF5 vulnerabilities

Vulnerabilities for packages: druid, zipkin, logstash, thingsboard, cassandra-reaper...

GHSA-5M9F-RPHJ-C435 vulnerabilities

Vulnerabilities for packages: druid, zipkin, logstash, thingsboard, cassandra-reaper...

GHSA-PCW8-M77R-2528 vulnerabilities

Vulnerabilities for packages: nextcloud-server...

CVE-2026-76574

A flaw has been found in code-projects Hospital Information System 1.0. The impacted element is the function User::login of the file includes/users/UsersController.php of the component User Login Handler. This manipulation of the argument email causes sql injection. The attack is possible to be...

CVE-2026-16891

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16883

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to obtain sensitive information due to an out-of-bounds read...

CVE-2026-16888

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to a path traversal vulnerability...

CVE-2026-16839

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sensitive information due to an integer underflow in the IPv4 IP-options parser...

CVE-2026-16838

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite critical files and obtain sensitive information due to a time-of-check to time-of-use TOCTOU race condition...

CVE-2026-16825

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to obtain sensitive information and cause a denial of service due to an out-of-bounds write...