Lucene search
+L

136631 matches found

Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.9 views

PT-2026-65684

Impact A single malformed inbound UDP packet on the RTP/ICE socket can remotely terminate an active RTP or WebRTC media session. The packet receive handler indexes packet and STUN attribute bytes without sufficient length checks and throws, and the UDP receive loop converted any such exception in...

7.5CVSS5.9AI score
SaveExploits0References5
Broadcom
Broadcom
added 2026/07/28 12:0 a.m.8 views

OpenSSL 3.5.0 < 3.5.4 Multiple Vulnerabilities in SANnav images

The version of OpenSSL installed on the remote host is prior to 3.5.4. It is, therefore, affected by multiple vulnerabilities as referenced in the 3.5.4 advisory. - Issue summary: A timing side-channel which could potentially allow remote recovery of the private key exists in the SM2 algorithm...

7.5CVSS7.3AI score0.02251EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.10 views

PT-2026-65642

Summary A malicious input schema OpenAPI / JSON Schema can execute arbitrary Python code on the machine that imports the generated model. The x-python-import and customTypePath schema extensions flow, unsanitized, into the import statements datamodel-code-generator emits. A newline embedded in th...

7.5CVSS6.8AI score
SaveExploits0References5
CVE
CVE
added 2026/07/28 12:0 a.m.10 views

CVE-2026-51274

The CVE-2026-51274 entry relates to the schreibfaul1 ESP32-audioI2S 3.4.5 stack, where the heap-based buffer overflow occurs in the ID3v2 SYLT synchronized lyrics parser in audiolib. Root cause: missing bounds validation on attacker-controlled frame size and improper memory access during lyric pa...

6.7AI score0.00414EPSS
SaveExploits0
AlmaLinux
AlmaLinux
added 2026/07/28 12:0 a.m.11 views

None: coreutils bug fix and enhancement update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Bug Fixes and Enhancements: Fix execution of the downstream tests in coreutils-df-direct.patch and coreutils-i18n.patch almalinux-8.10.z...

5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/28 12:0 a.m.12 views

PT-2026-65650

Summary When the Pydantic v2 output mode is in use, datamodel-code-generator reads a validators array from each model entry in the --extra-template-data file and synthesises a Pydantic @field validator... decorator from each entry. The field names and the validator mode are interpolated into the...

7.8CVSS6.4AI score
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2026/07/28 12:0 a.m.9 views

Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-111 (ALASKERNEL-5.15-2026-111)

The version of kernel installed on the remote host is prior to 5.15.211-149.249. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-111 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUGON with proper erro...

9.8CVSS7AI score0.00908EPSS
SaveExploits18References42
OSV
OSV
added 2026/07/27 11:2 p.m.11 views

MAL-2026-11101 Malicious code in motion-forge-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9c883a4865db328dff8b43c279a353b6ad494416a665e0201fdca7b6ba4daa Package advertises itself as a small PostCSS vendor-prefix / CSS-variable-injection plugin but ships a single 105KB obfuscator.io-packed bundle as it...

5.6AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/07/27 11:2 p.m.17 views

Malicious code in motion-forge-css (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f9c883a4865db328dff8b43c279a353b6ad494416a665e0201fdca7b6ba4daa Package advertises itself as a small PostCSS vendor-prefix / CSS-variable-injection plugin but ships a single 105KB obfuscator.io-packed bundle as it...

5.6AI score
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/27 10:8 p.m.7 views

Security Bulletin: Security Vulnerability in Apache Kafka affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-35554, CVE-2026-33558)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed the vulnerability. Vulnerability Details CVEID:CVE-2026-33558 DESCRIPTION: Information exposure vulnerability has been identified in Apache Kafka. The NetworkClient component will output entire requests and responses...

8.7CVSS7.1AI score0.0063EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/27 10:4 p.m.5 views

Security Bulletin: Security Vulnerability in Spring Security affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2025-22228)

Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Spring Security Vulnerability Details CVEID:CVE-2025-22228 DESCRIPTION: BCryptPasswordEncoder.matchesCharSequence,String will incorrectly return true for passwords larger than 72 characters as lo...

7.4CVSS7.2AI score0.00568EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/27 8:44 p.m.7 views

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

9.3CVSS5.7AI score0.00217EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/27 8:41 p.m.4 views

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2026-9006)

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

9.1CVSS5.8AI score0.00239EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/27 8:39 p.m.6 views

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2026-11536)

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

8.5CVSS6.5AI score0.00344EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/27 8:38 p.m.6 views

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

9.8CVSS5.8AI score0.00409EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/27 8:34 p.m.5 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues. We have performed updates to the Operators used by our Speech Services. The following vulnerabilities have been addressed in this update. Please read the details for remediation below. Vulnerability...

7.5CVSS6.6AI score0.00638EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/27 8:30 p.m.6 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Hugging Face Transformers [CVE-2025-14920, CVE-2025-14921, CVE-2025-14926, CVE-2025-14927]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Hugging Face Transformers CVE-2025-14920, CVE-2025-14921, CVE-2025-14926, CVE-2025-14927. Hugging Face Transformers is used in our speech services runtimes. These vulnerabilities have been addressed. Please read the...

7.8CVSS7.6AI score0.00289EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/27 8:28 p.m.12 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in bouncycastle [CVE-2025-14813] [CVE-2026-0636] [CVE-2026-5598]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in bouncycastle, due to flaws in BC-JAVA on all core modules. CVE-2025-14813 CVE-2026-0636 CVE-2026-5598. Bouncy castle BC-JAVA is used in our speech microservices. This vulnerability has been addressed. Please read the...

9.9CVSS5.8AI score0.00691EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/27 8:27 p.m.5 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a code inconsistency in Bouncy Castle [CVE-2026-8149]

Summary IBM Watson Speech Services Cartridge is vulnerable to a code inconsistency in Bouncy Castle packages: BC-LTS on Linux, X8664, AVX, AVX-512f CVE-2026-8149. Bouncy Castle is used in our speech microservices. This vulnerability has been addressed. Please read the details for remediation belo...

5.1CVSS5.8AI score0.00158EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/27 8:25 p.m.5 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to HTTP Request/Response Smuggling in Starlette [CVE-2026-48710]

Summary IBM Watson Speech Services Cartridge is vulnerable to HTTP Request/Response Smuggling in Starlette, due to a routing algorithm which relies on the raw HTTP path while request.url is rebuilt from the Host header, potentially allowing a malformed header to make request.url.path differ from...

6.5CVSS6.3AI score0.01839EPSS
SaveExploits2Affected Software1
Rows per page
Query Builder