28928 matches found
MINI-MM64-G928-R7C6
Bulletin has no description...
CGA-8GVQ-Q477-7CXR
Bulletin has no description...
MINI-X5PV-546Q-H957
Bulletin has no description...
MINI-866F-HR64-V57G
Bulletin has no description...
MINI-QG32-V54G-JJC7
Bulletin has no description...
pypdf: Possible long runtimes for repeated malformed cross-reference entries
ImpactAn attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with repeated malformed cross-reference streams. PatchesThis has been fixed in pypdf==6.14.0. WorkaroundsIf you cannot upgrade yet, consider applying the changes from ...
PYSEC-2026-3610 pypdf: Possible long runtimes for repeated malformed cross-reference entries
Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with repeated malformed cross-reference streams. Patches This has been fixed in pypdf==6.14.0. Workarounds If you cannot upgrade yet, consider applying the changes fr...
MINI-CCRP-7RFG-3MQV
Bulletin has no description...
CVE-2026-16070 Brizy - Page Builder < 2.8.19 - Contributor+ Template Type Update via IDOR
The Brizy WordPress plugin before 2.8.19 does not properly verify authorization on the object being modified before updating a template's type meta, validating a request parameter that is different from the one used in the write operation, allowing users with Contributor-level access and above to...
CVE-2026-16070
The Brizy - Page Builder WordPress plugin (versions before 2.8.19 ) is vulnerable to an Insecure Direct Object Reference (IDOR) due to improper authorization checks. The plugin fails to verify authorization on the object being modified when updating a template's type meta, specifically by validat...
When Modalities Fail to Tango: Conformal Backdoor Detection in Multimodal Contrastive Learning
Backdoor attacks in multimodal contrastive learning MCL have garnered growing attention in recent years, as many downstream tasks critically depend on pre-trained MCL models. Existing detection-based defenses predominantly rely on the CLIPScore metric, under the assumption that poisoned pairs...
kernel security update
5.14.0-687.33.1 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...
kernel security, bug fix, and enhancement update
6.12.0-211.42.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...
PT-2026-67811
Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.1.3 Description Flowise contains an Insecure Direct Object Reference IDOR where the openai-assistants-vector-store endpoints accept a client-controlled credential parameter. The system loads credentials by id and us...
Amazon Linux 2023 : java-21-amazon-corretto, java-21-amazon-corretto-devel, java-21-amazon-corretto-headless (ALAS2023-2026-2021)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2021 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java S...
MINI-GMRX-GFQ3-R9H2
Bulletin has no description...
MINI-HXHJ-4VPR-WV47
Bulletin has no description...
GHSA-2MMH-4RF8-7XG6 Duplicate Advisory: SiYuan: Cross-boundary content disclosure via getBacklinkDoc/getBackmentionDoc (publish mode): reader-reachable rendered DOM of publish-forbidden docs; sibling list endpoints are filtered
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36v8-mpjm-8j5r. This link is maintained to preserve external references. Original Description SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content...
Duplicate Advisory: SiYuan: Cross-boundary content disclosure via getBacklinkDoc/getBackmentionDoc (publish mode): reader-reachable rendered DOM of publish-forbidden docs; sibling list endpoints are filtered
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-36v8-mpjm-8j5r. This link is maintained to preserve external references. Original Description SiYuan before v3.7.3 fails to apply publish-access filters to the getBacklinkDoc and getBackmentionDoc content...