Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in virtualenv-20.26.3-py3-none-any.whl

Summary IBM Watson Discovery Cartridge affected by vulnerability in virtualenv-20.26.3-py3-none-any.whl Vulnerability Details CVEID:CVE-2026-22702 DESCRIPTION: virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use...

CVE-2026-5166

creationtimestamp| type| source ---|---|--- 2026-04-29 16:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknixbwiho2e 2026-04-29 23:42:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkobnbgmuy2n 2026-04-30 03:00:43+00:00| seen|...

CVE-2026-7111

creationtimestamp| type| source ---|---|--- 2026-04-29 15:28:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mkng2jxlx22e 2026-04-29 18:20:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknpo3nmon2n 2026-04-30 21:00:38+00:00| seen|...

CVE-2026-5161

Improper link resolution before file access 'link following' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2...

CVE-2026-42652

creationtimestamp| type| source ---|---|--- 2026-04-29 14:56:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknebg6ruc2k...

CVE-2026-7288

A vulnerability has been found in D-Link DIR-825M 1.1.12. This vulnerability affects the function sub4151FC of the file /boafrm/formVpnConfigSetup. The manipulation of the argument submit-url leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed t...

CVE-2026-7248

A vulnerability was found in D-Link DI-8100 16.07.26A1. This affects the function tgfilehtm of the file tgfile.htm of the component CGI Endpoint. The manipulation of the argument fn results in buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2026-42644

creationtimestamp| type| source ---|---|--- 2026-04-29 14:46:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkndpdahgy2p...

CVE-2026-5140

creationtimestamp| type| source ---|---|--- 2026-04-29 14:41:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkndfxha222o 2026-05-01 01:57:26+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqznkns422q 2026-05-21 21:31:04+00:00| seen|...

CVE-2026-42648

creationtimestamp| type| source ---|---|--- 2026-04-29 14:39:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkndbszbdj2q...

CVE-2026-42520

creationtimestamp| type| source ---|---|--- 2026-04-29 14:33:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkncwzgp6h2e 2026-04-29 16:28:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mknjes22qz2a 2026-04-30 22:07:28+00:00| seen|...

CVE-2026-42522

creationtimestamp| type| source ---|---|--- 2026-04-29 14:29:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkncqtsprg2i...

CVE-2026-42519

creationtimestamp| type| source ---|---|--- 2026-04-29 14:28:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkncnx74ap2r...

CVE-2026-5161 Improper Authentication in TUBITAK BILGEM's Pardus About

Improper link resolution before file access 'link following' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2...

CVE-2026-5161

Improper link resolution before file access 'link following' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2...

EUVD-2026-26236

Improper link resolution before file access 'link following' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before v1.2.1...

CVE-2026-5161 Improper Authentication in TUBITAK BILGEM's Pardus About

Improper link resolution before file access 'link following' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus About allows Symlink Attack. This issue affects Pardus About: before 1.2.2...

CVE-2026-25852

Local privilege escalation via DLL hijacking in Acronis DeviceLock DLP (Windows) prior to build 9.0.93212. Root cause: DLL hijacking. Impact: local elevation of privileges. Remediation: upgrade to build 9.0.93212 or newer. Exploitation details not provided in the supplied documents.

JLSEC-2026-351

A vulnerability, which was classified as problematic, was found in HDF5 1.14.6. Affected is the function H5FSsectlinksize of the file src/H5FSsection.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to t...

CVE-2026-7278

creationtimestamp| type| source ---|---|--- 2026-04-29 12:50:14+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mkn56yjc7r2m 2026-05-12 16:46:39+00:00| seen| https://vulnerability.circl.lu/bundle/20100033-b137-47a0-b98c-568c18deda5a...