171504 matches found
MINI-44P8-68W5-3G93
Bulletin has no description...
CVE-2026-71553 ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS
ApostropheCMS is an open-source Node.js content management system. In 4.32.0 and earlier, PATCH /api/v1/article/:id accepts the inherited path toString.call and passes it through the utility module to apos.util.set and apos.util.get, allowing an authenticated editor to overwrite the shared...
CVE-2026-71553 ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS
ApostropheCMS is an open-source Node.js content management system. In 4.32.0 and earlier, PATCH /api/v1/article/:id accepts the inherited path toString.call and passes it through the utility module to apos.util.set and apos.util.get, allowing an authenticated editor to overwrite the shared...
CVE-2026-71553 ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS
ApostropheCMS is an open-source Node.js content management system. In 4.32.0 and earlier, PATCH /api/v1/article/:id accepts the inherited path toString.call and passes it through the utility module to apos.util.set and apos.util.get, allowing an authenticated editor to overwrite the shared...
MINI-8498-8PQ2-52M9
Bulletin has no description...
MINI-5HC8-F4PG-V75V
Bulletin has no description...
MINI-MWXH-F4RW-66PW
Bulletin has no description...
MINI-2F3G-6J7G-VHHG
Bulletin has no description...
MINI-QVX8-J2R9-HVX7
Bulletin has no description...
MINI-5FPF-RW7M-Q25J
Bulletin has no description...
MINI-8XWX-4534-CP8F
Bulletin has no description...
MINI-627V-HJCH-25PR
Bulletin has no description...
MINI-232P-VM7X-F3GQ
Bulletin has no description...
MINI-W7WG-5WM9-2Q4X
Bulletin has no description...
MINI-QC5H-4P6Q-4WF2
Bulletin has no description...
MINI-24W5-R8VF-3PPF
Bulletin has no description...
CLSA-2026-1786995617 TuxCare security update for 22 packages (9 CVEs)
TuxCare rebuilt 22 packages to address 9 CVEs. Fixed in 16.0.6-tuxcare.7...
CVE-2026-8723
A flaw was found in the qs library. When the qs.stringify function processes arrays containing null or undefined elements, and is configured with both arrayFormat: 'comma' and encodeValuesOnly: true, it can trigger a TypeError. This error causes the application to crash or return a 500 error,...
CVE-2025-27770
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the /createproject endpoint is vulnerable to remote code execution via the checks and metadata parameters. Any user that has access to UpTrain and a valid authentication method may b...
Important: Red Hat Security Advisory: kpatch-patch-5_14_0-687_10_1 security update
An update for kpatch-patch-5140-687101 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...