136526 matches found
K000163180: BIND vulnerability CVE-2026-11605
Security Advisory Description The issue is a resource exhaustion vulnerability associated with DNSSEC validation. BIND always validates all RRSIG records in an answer, even if they are not strictly needed. A query to an authoritative server/zone which returns many valid but superfluous RRSIG...
Exploit for Missing Authentication for Critical Function in Smartertools Smartermail
SmarterMail ConnectToHub RCE A Python-based exploit for CVE...
Exploit for Missing Authentication for Critical Function in Smartertools Smartermail
SmarterMail ConnectToHub RCE A Python-based exploit for CVE...
Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
Summary Multiple vulnerabilities were addressed in IBM Observability with Instana within Instana Agent container image build 1.0.324 Vulnerability Details CVEID:CVE-2026-44892 DESCRIPTION: Netty is a network application framework for development of protocol servers and clients. Prior to version...
Security Bulletin: Multiple vulnerabilities affect IBM Sterling Connect:Direct for Microsoft Windows
Summary There are vulnerabilities in IBM Semeru Runtime version 17 used by IBM Sterling Connect:Direct for Microsoft Windows. IBM Sterling Connect:Direct for Microsoft Windows has addressed the applicable CVEs CVE-2026-41254, CVE-2026-47063, CVE-2026-60147, CVE-2026-46968, CVE-2026-47027,...
Security Bulletin: IBM Edge Data Collector component uses multiple dependencies which are vulnerable to multiple CVEs.
Summary IBM Edge Data Collector component uses multiple third-party libraries which are vulnerable to several security vulnerabilities. The CVE details are listed below in the Vulnerability Details section. This bulletin provides information about the affected components and the remediation for...
Security Bulletin: SOAR App Host is vulnerable to using components with known vulnerabilities (CVE-2026-41254, CVE-2026-47057)
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. SOAR APP host has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an...
Security Bulletin: IBM Security SOAR is vulnerable to using components with known vulnerabilities (CVE-2026-69247, CVE-2026-69248, CVE-2026-69249)
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM Security SOAR has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-69247 DESCRIPTION: cryptography is a package designed to...
Security Bulletin: IBM Security SOAR is vulnerable to using components with known vulnerabilities (CVE-2026-41254, CVE-2026-47057)
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM Security SOAR has addressed the applicable CVEs with an update. Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an...
Security Bulletin: IBM ContextForge MCP Gateway is affected by server-side request forgery (DNS rebinding) via the A2A agent invocation endpoint
Summary IBM ContextForge MCP Gateway contains a server-side request forgery SSRF vulnerability in its Agent-to-Agent A2A invocation endpoint POST /a2a/agentname/invoke. Unlike every other outbound egress path in the gateway, the A2A invocation path does not pin the DNS-resolved IP address at...
Security Bulletin: IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation via jq filter execution
Summary IBM ContextForge MCP Gateway allows authenticated users with developer privileges to supply a jq program in the tool jsonpathfilter field that executes unrestricted built-in such as $ENV inside the server process, exposing environment variables including cryptographic keys and database...
tutor-lms-methodmap-poc
Tutor LMS ≤ 4.0.5 — Unauthenticated PHP Function Execution via...
K000163177: Multiple Vim vulnerabilities
Security Advisory Description CVE-2024-41957 Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will als...
SUSE CVE-2026-40018
None None None No publicly available exploits are known...
SUSE CVE-2026-40204
None None None No publicly available exploits are known...
K000163176: libssh vulnerability CVE-2026-59845
Security Advisory Description A flaw was found in libssh. When ProxyCommand is used, an unchecked fork failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service. CVE-2026-59845 Impact There is n...
K000163175: Linux kernel vulnerability CVE-2026-63831
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skbcowdata before in-place crypto llsecdoencryptunauth, llsecdoencryptauth, llsecdodecryptunauth, and llsecdodecryptauth all perform in-place cryptographic transformations on sk...
K000163171: Linux kernel netfilter vulnerability CVE-2026-53000
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: netfilter: nat: use kfreercu to release ops Florian Westphal says: "Historically this is not an issue, even for normal base hooks: the data path doesn't use the original nfhookops that are used to...
Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (CPDS 1.0)
Summary Vulnerabilities exists in IBM Cloud Pak for Data System CPDS 1.0 addressed in 11.3.1.2-IF1 Vulnerability Details CVEID:CVE-2026-14350 DESCRIPTION: The product could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written ...
secretlint v13.0.5
Secretlint Secretlint is a Pluggable linting tool to prevent committing credentials. Features Scanner : Find credentials in a project and report these Project Friendly: Easy to set up your project and integrate CI services Pre-Commit Hook : Prevent committing credential files Pluggable : Allow...