CVE-2026-12259

In nltk version 3.9.4, the nltk.downloader.Downloader.downloadpackage function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation. This allows an attacker to tamper with the package response body for info.url through a compromised...

PT-2026-42145

Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management SM affected versions not specified Description A security misconfiguration exists due to a missing or insecure X-Content-Type-Options header. This allows browsers to perform MIME-type sniffing, which is a process...

OESA-2022-1506 curl security update

Curl is used in command lines or scripts to transfer data. Security Fixes: When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from...

The vulnerability of Cisco Email Security Appliance’s security systems arises from insufficient validation of incoming data. This allows attackers to send messages containing malicious content to users.

The vulnerability of Cisco Email Security Appliance’s security systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to send messages containing malicious content to users, using certain types of files without the necessary...