164472 matches found
Security Bulletin: Multiple vulnerabilties in DevOps Test Hub
Summary Multiple vulnerabilities addressed in DevOps Test Hub in version 12.0.0 Vulnerability Details CVEID:CVE-2026-47857 DESCRIPTION: In Reactor Core, applications that use the Flux.windowTimeout operator with fairBackpressure enabled are vulnerable to a Denial of Service DoS condition. Reactor...
Security Bulletin: IBM OpenPages is affected by multiple security vulnerabilities of DB2 Database Server (September 2026)
Summary IBM® Db2® Database Server is shipped as a supporting program of IBM OpenPages. Information about security vulnerabilities affecting IBM Db2 Database Server has been published in multiple security bulletins. Vulnerability Details Refer to the security bulletins listed in the...
Security Bulletin: Multiple vulnerabilties in DevOps Test Hub
Summary Multiple vulnerabilities addressed in DevOps Test Hub in version 11.0.9 Vulnerability Details CVEID:CVE-2026-22735 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events SSE. This issue affects Spring Foundation: from 7.0.0 throu...
CVE-2026-102086
A NULL Pointer Dereference vulnerability exists in the DNS plugin of Juniper Networks Junos OS on SRX Series devices. The flaw occurs when multiple DNS queries in a single flow session involve both Security Intelligence (SecIntel) feeds and DNS Domain Generation Algorithm (DGA) analysis; an error...
EUVD-2026-101455
A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. When multiple DNS queries are received in a single flow session, where one query matches a Security...
CVE-2026-102086 Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash
A NULL Pointer Dereference vulnerability in the DNS plugin of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service DoS. When multiple DNS queries are received in a single flow session, where one query matches a Security...
CVE-2026-89077
Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer SFTP module. This issue affects MOVEit Transfer: before 2025.1.6 and from 2026.0.0 before 2026.0.4...
CVE-2026-100169
Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...
hplip: HP Linux Imaging and Printing Software - Use of DSA Key
A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability is due to the use of a weak Digital Signature Algorithm DSA for code signing. A remote attacker could exploit this weakness to forge signatures, potentially leading to the execution of unauthorized code or...
hplip: HP Linux Imaging and Printing Software - Use of DSA Key
A flaw was found in the HP Linux Imaging and Printing Software HPLIP. This vulnerability is due to the use of a weak Digital Signature Algorithm DSA for code signing. A remote attacker could exploit this weakness to forge signatures, potentially leading to the execution of unauthorized code or...
Security Bulletin: a vulnerability has been addressed in IBM Concert Network Observability
Summary IBM Concert Network Observability has addressed this security vulnerability with a Network Collectors update. Vulnerability Details ID:WS-2026-0062 DESCRIPTION: Unbounded mutual recursion in the TOML parser of github.com/pelletier/go-toml/v2. "unstable.Parser.parseVal" dispatches nested...
CVE-2026-100169
Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...
CVE-2026-100169 Account pre-hijacking in the Prowler API through email based social account linking without verification
Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...
CVE-2026-100169
The Prowler API (versions 5.4.0 to before 5.35.0) contains an improper authentication vulnerability in its social account linking path. The root cause is that ProwlerSocialAccountAdapter.pre_social_login() links Google or GitHub logins to any existing local account with a matching email address w...
CVE-2026-100169 Account pre-hijacking in the Prowler API through email based social account linking without verification
Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...
CVE-2026-100169 Account pre-hijacking in the Prowler API through email based social account linking without verification
Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...
EUVD-2026-101295
Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
Summary Multiple vulnerabilities were addressed in IBM API Connect version 10.0.8.13 Vulnerability Details CVEID:CVE-2026-45820 DESCRIPTION: fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring...
K000163710: BIND vulnerability CVE-2026-10723
Security Advisory Description BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses. This issue affects BIND 9 versions 9.18.0 through 9.18.50, 9.20.0 through 9.20.24, 9.21.0 through 9.21.23, 9.11.3-S1 through...
