136293 matches found
Security Bulletin: IBM Storage Protect for Space Management is vulnerable to denial of service due to jose4j (CVE-2024-29371)
Summary IBM Storage Protect for Space Management uses the jose4j library as part of its security infrastructure. A vulnerability in jose4j could allow an attacker to cause a denial of service DoS by sending a specially crafted JSON Web Encryption JWE token with an exceptionally high compression...
Moderate: Red Hat Security Advisory: libsolv security update
An update for libsolv is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Security Bulletin: IBM Storage Protect for Space Management is vulnerable to cross-site request forgery token leakage due to Angular (CVE-2025-66035)
Summary IBM Storage Protect for Space Management uses Angular to provide web-based user interface components. A vulnerability in Angular's HttpClient could allow the leakage of Cross-Site Request Forgery XSRF tokens when protocol-relative URLs are used, potentially exposing the token to an...
Security Bulletin: IBM Storage Protect for Space Management is affected by an identity spoofing vulnerability in IBM WebSphere Application Server Liberty (CVE-2026-3621)
Summary IBM Storage Protect for Space Management uses IBM WebSphere Application Server Liberty as part of its web application runtime. Under limited conditions, when an application is deployed without authentication and authorization configured, IBM WebSphere Application Server Liberty is...
Security Bulletin: IBM Storage Protect Client is vulnerable to cross-site request forgery token leakage due to Angular (CVE-2025-66035)
Summary IBM Storage Protect Client uses Angular to provide web-based user interface components. A vulnerability in Angular's HttpClient could allow the leakage of Cross-Site Request Forgery XSRF tokens when protocol-relative URLs are used, potentially exposing the token to an attacker-controlled...
Security Bulletin: IBM Storage Protect for Space Management is vulnerable to remote code execution due to IBM WebSphere Application Server Liberty (CVE-2025-14914)
Summary IBM Storage Protect for Space Management uses IBM WebSphere Application Server Liberty as part of its web application runtime. A vulnerability in IBM WebSphere Application Server Liberty could allow a privileged user to upload a specially crafted ZIP archive containing path traversal...
Moderate: Red Hat Security Advisory: libsolv security update
An update for libsolv is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Moderate: Red Hat Security Advisory: libsolv security update
An update for libsolv is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Moderate: Red Hat Security Advisory: libsolv security update
An update for libsolv is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerabilit...
GHSA-X83G-979R-F5FH Sylius Mollie Plugin has unauthenticated IDOR that leaks order token and customer PII
Impact Two unauthenticated Mollie shop endpoints look up orders by a sequential integer orderId with no ownership or session check. Chained, they expose customer PII. GET /locale/thank-you PageRedirectController::thankYouAction, route syliusmollieshopthankyoupageredirect loads the order with...
Sylius Mollie Plugin has unauthenticated IDOR that leaks order token and customer PII
Impact Two unauthenticated Mollie shop endpoints look up orders by a sequential integer orderId with no ownership or session check. Chained, they expose customer PII. GET /locale/thank-you PageRedirectController::thankYouAction, route syliusmollieshopthankyoupageredirect loads the order with...
GHSA-FG7F-2386-8897 Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex
Summary ReviewsCorpusReader extracts feature annotations of the form label followed by a bracketed signed digit e.g. a label then +2 from each review line, using the module-level FEATURES regex. The feature-label sub-pattern is unbounded — an optional greedy run of word-plus-whitespace groups...
Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex
Summary ReviewsCorpusReader extracts feature annotations of the form label followed by a bracketed signed digit e.g. a label then +2 from each review line, using the module-level FEATURES regex. The feature-label sub-pattern is unbounded — an optional greedy run of word-plus-whitespace groups...
Security Bulletin: IBM Storage Protect for Space Management is affected by multiple vulnerabilities in IBM SDK, Java Technology Edition (CVE-2026-22016, CVE-2026-22021, CVE-2026-22013, CVE-2026-22018, CVE-2026-34268, CVE-2026-22007)
Summary IBM Storage Protect for Space Management includes IBM SDK, Java Technology Edition to support Java-based components. Multiple vulnerabilities in IBM SDK, Java Technology Edition could allow an attacker to obtain unauthorized access to sensitive information or cause a partial denial of...
Spring Data: Unbounded property-path cache keyed by externally-supplied path string
src/main/java/org/springframework/data/mapping/context/PersistentPropertyPathFactory.java:175 · Unbounded Resource Allocation Algorithmic DoS Impact When a consuming module routes user-supplied dot-paths sort parameters, projection paths, PATCH paths through...
GHSA-88FW-V6X4-3F58 Spring Data: Unbounded property-path cache keyed by externally-supplied path string
src/main/java/org/springframework/data/mapping/context/PersistentPropertyPathFactory.java:175 · Unbounded Resource Allocation Algorithmic DoS Impact When a consuming module routes user-supplied dot-paths sort parameters, projection paths, PATCH paths through...
CVE-2026-51301
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51299
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...