54731 matches found
Security Bulletin: OpenSSH client bug (CVE-2016-0777 and CVE-2016-0778)
Question Security Bulletin: OpenSSH client bug CVE-2016-0777 and CVE-2016-0778 "Business Unit":"code":"BU059","label":"IBM Software w/o TPS","Product":"code":"SS8NDZ","label":"IBM Aspera","Component":"","Platform":"code":"PF025","label":"Platform Independent","Version":"All...
GHSA-3VGW-585J-4M45 BBOT: Path traversal (Zip-Slip) in unarchive module - incomplete fix for CVE-2025-10284
The unarchive internal module's archive extraction commands perform no code-level validation on extracted file paths, relying entirely on the behavior of external tools e.g. GNU tar which varies by platform. While CVE-2025-10284 addressed git-specific RCE vectors, the underlying archive extractio...
GHSA-5JV7-2MJM-H6QJ npm PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining
Summary The published npm package praisonai ships dist/tools/utility-tools.js, which exports a shellcommand helper described in source as: text Execute shell command safe version - read-only commands The helper attempts to enforce a safe read-only command allowlist by checking only the first...
CVE-2026-48979
PHP Standard Library PSL is set of APIs covering async, collections, networking, I/O, cryptography, terminal UI, etc. In versions 6.1.0, 6.1.1 and 6.2.0, the Psl\H2\ServerConnection does not validate that the total bytes received in DATA frames match the content-length header declared in the...
EUVD-2026-37565
In multiple places, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
USN-8361-3: Linux kernel vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Packet sockets; CVE-2026-31504...
UBUNTU-CVE-2026-39044
Integer overflow in WAV parser cue handling...
CVE-2026-46970
...
CVE-2026-46967
...
CVE-2026-46963
...
CVE-2026-46957
...
CVE-2026-46957
Technical details are not publicly available in the provided documents. Monitor for updates.
CVE-2026-46953
...
CVE-2026-46951
Technical details about CVE-2026-46951 are not publicly provided in the supplied documents. Monitor Oracle security alerts and CVE feeds for updates on affected products, impact, and fixes.
CVE-2026-46946
Technical details are not publicly available in the provided documents for CVE-2026-46946; monitor for updates.
CVE-2026-46940
...
CVE-2026-46935
...
CVE-2026-46928
...
CVE-2026-46919
Technical details about CVE-2026-46919 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records for affected products, impact, and remediation.