CVE-2026-103488

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues...

EUVD-2026-90579

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues...

CVE-2026-103488

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed authenticated users to add themselves to project teams and access restricted issues...

CentOS Linux 8 [TuxCare] Security Update: rsync / rsync-daemon Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1790267010)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1790267010 advisory. - rsync before 3.5.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability in the rrsync restricted shell...

Rocky Linux 9.6 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (ALMALINUX9.6:CLSA-2026:1779436377)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779436377 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS...

CentOS Linux 6 [TuxCare] Security Update: cups / cups-devel / cups-libs / cups-lpd / cups-php (CENTOS6:CLSA-2026:1778142413)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1778142413 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon...

Rocky Linux 8 [CIQ] Security Update: vim-X11 / vim-X11-debuginfo / vim-common / vim-common-debuginfo / etc (crlsa-2020_4453)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20204453 advisory. vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode CVE-2019-20807 Tenable has extracted the preceding description blo...

CVE-2026-100272

In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...

CVE-2026-100272

In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...

CVE-2026-100272

In JetBrains YouTrack versions before 2026.2.19197 , a lack of missing authorisation in the notification template preview feature allows Project Administrators to read restricted issues . The impact is categorized as High for confidentiality. Remediation is available in version 2026.2.19197 or la...

EUVD-2026-90016

In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...

CVE-2026-100272: Authorization Bypass Through User-Controlled Key

In JetBrains YouTrack before 2026.2.19197 missing authorisation in the notification template preview allowed Project Administrators to read restricted issues...

CentOS Linux 7 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc (CENTOS7:CLSA-2026:1778662564)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1778662564 advisory. - OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, CUPS daemon...

CVE-2024-8963

CVE-2024-8963 Ivanti Cloud Services Appliance - パストラバーサル 4.6 Patch 519 より前の Ivanti CSA におけるパストラバーサルにより、リモートの認証されていない攻撃者が制限された機能にアクセスできる可能性があります。...

CVE-2026-90925

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117...

EUVD-2026-88291

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.101 before 6.4.117...

DNSlivery

DNSlivery DNSを介した簡単なファイル・ペイロード配信ツール。 DNSlivery 謝辞 説明 要約 どのような問題を解決しようとしているのか？ 仕組み 要件 セットアップ DNSゾーン DNSlivery 使用方法 サーバー ターゲット 謝辞 このプロジェクトは、元々PowerDNSと、Paul's Security Weeklyポッドキャスト590（youtu.be/CP6cIwFJswQ）におけるJoff Thyer氏の技術セグメントに触発されたものです。 説明 要約 DNSliveryは、DNSを転送プロトコルとして使用し、ターゲットにファイルを配信することができます。...

CVE-2026-97469

A flaw was found in PostgreSQL Anonymizer. An authenticated, unprivileged masked user can bypass access restrictions to execute restricted functions by embedding function calls within a subquery. By repeatedly invoking functions such as anon.hash, an attacker can collect output to deduce the...

CVE-2026-82915

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.1...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the download endpoint. An attacker can access restricted audio content by directly requesting media files using valid media identifiers. Remediation Upgrade azuracast/azuracast to version 0.23.8 or higher...