616703 matches found
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in cryptography
Summary IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in cryptography Vulnerability Details CVEID:CVE-2026-69247 DESCRIPTION: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0,...
CVE-2026-57012
In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-57012
In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-78992
In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-57012
A missing permission check within the Setup Wizard allows for a potential remote package install . This vulnerability can lead to a remote escalation of privilege without requiring additional execution privileges or user interaction. Exploitation details are not provided in the documents.
ROOT-APP-NPM-AIKIDO-2025-10436 AIKIDO-2025-10436 in multer - Patched by Root
Root has patched AIKIDO-2025-10436 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2025-48997 CVE-2025-48997 in multer - Patched by Root
Root has patched CVE-2025-48997 in the multer package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-AIKIDO-2025-10435 AIKIDO-2025-10435 in multer - Patched by Root
Root has patched AIKIDO-2025-10435 in the multer package for Root:npm. Multiple fixed versions available...
CVE-2026-79705
A flaw was found in the buildah/copier Go package. When used outside of Buildah by a non-root caller, a crafted tar archive containing malicious symlinks can escape the target extraction directory and create files outside the intended destination. Buildah itself uses chroot hardening and is not...
MAL-2026-16176 Malicious code in fulfillment-cuprum-auth-widget (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 06df6767178d76043d26df04fcbe4e8de2f579d38e96f52a04346c04a6dda565 The package's preinstall script index.js runs automatically on npm install and collects host identifiers via os.hostname, os.userInfo, os.homedir, an...
CLSA-2026-1789484066 TuxCare security update for 14 packages (1 CVE)
TuxCare rebuilt 14 packages to address 1 CVE. Fixed in 14.2.35-tuxcare.9...
CLSA-2026-1789479340 TuxCare security update for 2 packages (2 CVEs)
TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 0.7.4-tuxcare.1...
CLSA-2026-1789478968 TuxCare security update for 11 packages (1 CVE)
TuxCare rebuilt 11 packages to address 1 CVE. Fixed in 4.0.18-tuxcare.1...
ROOT-APP-NPM-CVE-2026-44240 CVE-2026-44240 in basic-ftp - Patched by Root
Root has patched CVE-2026-44240 in the basic-ftp package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2026-90711 CVE-2026-90711 in proxy-addr - Patched by Root
Root has patched CVE-2026-90711 in the proxy-addr package for Root:npm. Multiple fixed versions available...
ROOT-APP-NPM-CVE-2024-4367 CVE-2024-4367 in pdfjs-dist - Patched by Root
Root has patched CVE-2024-4367 in the pdfjs-dist package for Root:npm. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-35523 CVE-2026-35523 in strawberry-graphql - Patched by Root
Root has patched CVE-2026-35523 in the strawberry-graphql package for Root:PyPI. Multiple fixed versions available...
CLSA-2026-1789461261 TuxCare security update for 23 packages (1 CVE)
TuxCare rebuilt 23 packages to address 1 CVE. Fixed in 16.0.6-tuxcare.9...