52167 matches found
EUVD-2026-21388
Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform SB2 v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the URL parameter...
CVE-2026-40227
In systemd 260 before 261, a local unprivileged user can trigger an assert via an IPC API call with an array or map that has a null element...
CVE-2026-31262
Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform SB2 v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary code via the URL parameter...
GHSA-3P68-RC4W-QGX5 vulnerabilities
Vulnerabilities for packages: lerna, kubeflow-pipelines, nextcloud-server, langfuse, prism, saf, jitsucom-jitsu, kubeflow-centraldashboard, opensearch-dashboards, kubeflow-katib...
golang: cmd/compile: no-op interface conversion bypasses overlap checking
A flaw was found in the cmd/compile package in the Go standard library. A no-op interface conversion prevented the compiler from correctly identifying non-overlapping memory moves. As a result, the compiler allows unsafe memory move operations to occur at runtime, potentially causing data...
GHSA-3P68-RC4W-QGX5 vulnerabilities
Vulnerabilities for packages: redisinsight, kibana, prism, gitlab-rails-ce-fips, opensearch-dashboards-fips, langfuse-fips, nextcloud-server, lerna, langfuse, kubeflow-pipelines, arangodb, kubeflow-katib, awx, gitlab-rails-ce, kubeflow-centraldashboard, wazuh-dashboard, opensearch-dashboards,...
RHSA-2026:6552 Red Hat Security Advisory: OpenShift Container Platform 4.18.37 packages and security update
Bulletin has no description...
RHSA-2026:1249 Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
Bulletin has no description...
WordPress ProSolution WP Client plugin <= 1.9.9 - Unauthenticated Arbitrary File Upload via proSol_fileUploadProcess vulnerability
Unauthenticated Arbitrary File Upload via proSolfileUploadProcess vulnerability discovered by Nabil Irawan - Heroes Cyber Security in WordPress Plugin ProSolution WP Client versions = 1.9.9...
Security Bulletin: Platform Navigator in IBM Cloud Pak for Integration is vulnerable to vulnerability in python_multipart
Summary Platform Navigator in IBM Cloud Pak for Integration is vulnerable to vulnerability in pythonmultipart. CVE-2026-24486 vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-24486 DESCRIPTION: Python-Multipart is a streaming multipart parser for Python. Prior to version...
CVE-2026-5500
wolfSSL's wcPKCS7DecodeAuthEnvelopedData does not properly sanitize the AES-GCM authentication tag length received and has no lower bounds check. A man-in-the-middle can therefore truncate the mac field from 16 bytes to 1 byte, reducing the tag check from 2⁻¹²⁸ to 2⁻⁸...
GHSA-3MWP-WVH9-7528 vulnerabilities
Vulnerabilities for packages: tritonserver-backend-vllm-cuda-13.0, py3-vllm-cuda-12.4, vllm-openai-cuda-12.9...
GHSA-43RW-359F-4H89 vulnerabilities
Vulnerabilities for packages: python...
GHSA-PW2V-CMFH-X2P3 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...
CVE-2026-23208 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...
GHSA-2MVM-XGM9-R324 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...
GHSA-5R72-P4CV-H344 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu, linux-azure...
CVE-2026-39859 vulnerabilities
Vulnerabilities for packages: kibana...