1487068 matches found
CVE-2026-54147: Use of a Broken or Risky Cryptographic Algorithm
http4k is a functional toolkit for Kotlin HTTP applications. Prior to 4.51.0.0, 5.42.0.0, and 6.50.0.0, DigestAuthProvider.verify in http4k-security-digest ignores its configured algorithm parameter and verifies every Digest response with hardcoded MD5. Deployments configured for SHA-256 therefor...
CVE-2026-84075: Missing Authentication for Critical Function
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...
PT-2026-101050
Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100282
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102173
Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100814
Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101062
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100341
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101056
Security vulnerability affects the gptscript package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101600
Security vulnerability affects the erlang package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101649
Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101245
Security vulnerability affects the calico-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100281
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100548
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101486
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102124
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102123
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100567
Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2024-27123: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later...