Important: Red Hat Security Advisory: python36:3.6 security update

An update for the python36:3.6 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-73796

A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query...

CVE-2026-73796 HPE NonStop TSQLEXE - Memory Corruption vulnerability

A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query...

EUVD-2026-100991

A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query...

CVE-2026-73796 HPE NonStop TSQLEXE - Memory Corruption vulnerability

A security vulnerability in HPE NonStop TSQLEXE may cause application crash via a crafted SQL query...

CVE-2026-73796

A security vulnerability exists in HPE NonStop TSQLEXE (specifically version T9193L01^AIP and earlier, and T9193L02 ) that may result in an application crash when processing a crafted SQL query . This vulnerability is characterized as a memory corruption issue and can lead to Denial of Service (D...

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Struts

Summary Multiple vulnerabilities were addressed in IBM Library Support for Struts 1.0 Vulnerability Details CVEID:CVE-2005-3745 DESCRIPTION: Cross-site scripting XSS vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML vi...

BIT-ELASTICSEARCH-2026-102404 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user can submit a specially crafted query that causes uncontrolled memory growth in the query processing engine, resulting in an out-of-memor...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via nil-pointer dereference in request decoding

A flaw was found in kin-openapi. An unauthenticated remote attacker can cause a Denial of Service DoS by sending specially crafted HTTP requests containing specific array query parameters or form-encoded data. Because the request decoder fails to properly validate certain array schemas before...

github.com/getkin/kin-openapi: kin-openapi: Denial of Service via redundant regular expression compilation in query parameter decoding

A flaw was found in kin-openapi. An unauthenticated remote attacker can trigger a Denial of Service DoS by sending requests containing a large number of query parameters to an affected endpoint. Due to redundant regular expression compilation within the parameter decoding loop, processing these...

CVE-2026-0313: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in Palo Alto Networks Cortex XSOAR and Cortex XSIAM OS Query content pack enables an authenticated administrator to execute arbitrary OS commands on remote endpoints...

PT-2026-113864

Name of the Vulnerable Software and Affected Versions Junos OS Evolved affected versions not specified Description A reachable assertion issue in the fwstatsd process allows an authenticated network attacker to cause a denial of service. This occurs when an SNMP query is sent to the...

Unity Linux 20.1070a Security Update: grafana (UTSA-2026-130092)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130092 advisory. The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by...

ALSA-2026:82858 Important: python36:3.6 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

PT-2026-113762

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Cortex XSOAR affected versions not specified Palo Alto Networks Cortex XSIAM OS Query content pack affected versions not specified Description A command injection issue in the OS Query content pack allows an authenticated...

RHEL 8 : python36:3.6 (RHSA-2026:82858)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:82858 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic da...

CVE-2026-100406: Improper Limitation of a Pathname to a Restricted Directory

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. From 2.0.0-alpha.0 until 2.0.0-alpha.5, dbt docs serve exposes the unauthenticated POST /api/v1/query endpoint in crates/dbt-docs-server/src/handlers/query.r...

CVE-2026-77371: Improper Access Control

Redash is a package for data visualization and sharing. From 26.0.0 until 26.9.0, the DuckDB query runner's connect path in redash/queryrunner/duckdb.py created connections with enableexternalaccess left at its default value of true. A user with query access to an administrator-created DuckDB dat...

PT-2026-113611

The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY STRING / REQUEST URI' parameter in all versions up to, and including, 1.4.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVE-2026-42093: Improper Neutralization of Special Elements used in an SQL Command

Redash is a package for data visualization and sharing. From versions after 8.0.0 until 26.9.0, the Query Results query runner in redash/queryrunner/queryresults.py accepts paramqueryNkey=value parameters and passed attacker-controlled values to replacequeryparameters for raw substitution into a...