Security Bulletin: Security vulnerability has been detected in IBM Security Verify Governance Identity Manager Adapters

Summary IBM Security Verify Governance Identity Manager Adapters are affected by a security vulnerability in the jackson-databind-2.22.1.jar component Vulnerability Details CVEID:CVE-2026-68497 DESCRIPTION: jackson-databind binds a JSON string to a javax.xml.datatype.Duration or...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.100 security and extras update

Red Hat OpenShift Container Platform release 4.12.100 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a security impact of Lo...

Eclipse Foundation Eclipse Milo

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to delete protected data, recover user credentials and impersonate legitimate users, or cause the server to stop responding to all clients. 2. RECOMMENDED PRACTICES CISA recommends users take defensive...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.72 security and extras update

Red Hat OpenShift Container Platform release 4.13.72 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a security impact of Low...

Security Bulletin: Multiple vulnerabilties in IBM Rational Functional Tester / DevOps Test UI

Summary Multiple vulnerabilities addressed in DevOps Test UI in version 12.0.0 Vulnerability Details CVEID:CVE-2026-45736 DESCRIPTION: ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close implementation is vulnerable to uninitialized memory disclosure...

Security Bulletin: Multiple vulnerabilties in IBM Rational Functional Tester / DevOps Test UI

Summary Multiple vulnerabilities addressed in DevOps Test UI in version 11.0.9 Vulnerability Details CVEID:CVE-2026-33671 DESCRIPTION: Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service ReDoS when...

pfsense-pppoe-secret-bang

abraxaslabs.tech · github.com/abraxas ·&...

Improper Adherence to Coding Standards

Overview org.webjars.npm:nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Improper Adherence to Coding Standards in the checkChar method of the Tokenizer class in src/addressparser/index.ts, where operatorExpecting hol...

Improper Adherence to Coding Standards

Overview nodemailer is an Easy as cake e-mail sending from your Node.js applications Affected versions of this package are vulnerable to Improper Adherence to Coding Standards in the checkChar method of the Tokenizer class in src/addressparser/index.ts, where operatorExpecting holds a single...

CLEANSTART-2026-TT67272 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Security vulnerability affects the nfs-subdir-external-provisioner package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate...

Security Bulletin: TS4500 Tape Library addresses security vulnerability CVE-2025-36069

Summary The Web UI and REST interfaces did not properly invalidate active user sessions after security-sensitive account changes, including password changes, password resets, or role and privilege updates, allowing previously issued session tokens to remain valid and potentially be reused to acce...

Security Bulletin: TS4500 Tape Library addresses security vulnerability CVE-2025-36252

Summary The Web UI did not generate a new session identifier following successful user authentication, allowing a pre-authentication session identifier to remain associated with the authenticated session. An attacker who could obtain or cause a user's browser to use a known session identifier...

Security Bulletin: TS4500 Tape Library addresses security vulnerability CVE-2026-19178

Summary The Web UI and REST interfaces allowed users with administrative-level role-mapping privileges to modify their own role mapping, creating a race condition in which a user could potentially preserve or restore elevated privileges while an administrator was changing the user's role. This...

Security Bulletin: TS4500 Tape Library addresses security vulnerability CVE-2025-36061

Summary The Web UI allowed an authenticated user with administrative privileges to generate a large number of email notifications by submitting multiple user creation requests, potentially resulting in email flooding and impacting the readability and usability of recipients' mailboxes. The issue...

Security Bulletin: TS4500 Tape Library addresses security vulnerability CVE-2026-19133

Summary The Web UI and REST interfaces did not properly enforce authorization when processing password modification requests, allowing a lower-privileged user to potentially use their own authenticated session to modify another user's password and gain access to the affected account. The issue ha...

...[ More ]

SmarterMail contains multiple vulnerabilities that can be chained to achieve remote code execution with NT AUTHORITY\SYSTEM privileges. The issues include a mutation-based cross site scripting vulnerability involving iCalendar attachments, improper session token invalidation that allows...

Apache Bigtop Manager 1.1.0 TarballExtractor Arbitrary File Write

Apache Bigtop Manager version 1.1.0 TarballExtractor contains a path traversal vulnerability that allows a malicious service tarball to write files outside the intended extraction directory. !/usr/bin/env python Apache Bigtop Manager 1.1.0 TarballExtractor Arbitrary File Write Vendor: The Apache...

dcm4che 5.35.0 Agfa2SR Path Traversal

dcm4che version 5.35.0 Agfa2SR contains a path traversal vulnerability that allows an attacker-supplied Agfa XML Structured Report to write files outside the configured output directory. Advisory ID: SYSS-2026-080 Product: dcm4che Manufacturer: J4Care Affected Versions: 5.35.0 Tested Versions:...

PT-2026-122829

Security vulnerability affects the nfs-subdir-external-provisioner package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate...

Apache Bigtop Manager 1.1.0 (TarballExtractor) Arbitrary File Write

Summary Bigtop Manager is a modern, AI-driven web application designed to simplify the complexity of bigdata cluster management. Provides an easy deployment solution not only for Apache Bigtop components, but also other community version bigdata components. Description Apache Bigtop Manager suffe...