12968 matches found
PT-2026-73275
Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...
Important: .NET 10.0 security, bug fix, and enhancement update
.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...
.NET: .NET Core: .NET Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...
.NET 10.0 security, bug fix, and enhancement update
An update is available for dotnet10.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET is a fast, lightweight and modular platform for creating cross platfo...
.NET: .NET Core: .NET Security Feature Bypass Vulnerability
Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-72431
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description SELinux failed to verify connect-related permissions when TCP Fast Open was utilized. This occurred because the system was not updated to ensure these checks were performed during the...
CVE-2026-17227
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command...
CVE-2026-17079
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter...
CVE-2026-16879
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input...
CVE-2026-17227
CVE-2026-17227 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. A remote authenticated attacker could bypass security restrictions due to improper neutralization of special elements used in an SQL command (SQL Injection). The IBM bulletin lists this CVE among multiple vulnerabilities in t...
CVE-2026-17227 IBM Db2 Mirror for i is affected by multiple vulnerabilities
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command...
EUVD-2026-58796
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter...
CVE-2026-17079
CVE-2026-17079 affects IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6. The issue allows a remote authenticated attacker to bypass security restrictions by disabling server-side input validation through a request parameter. The root cause is improper input validation control that can be manipulat...
CVE-2026-17079
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter...
CVE-2026-16879
CVE-2026-16879 affects IBM Db2 Mirror for i 7.4, 7.5, and 7.6. A remote authenticated attacker could bypass security restrictions due to improper authorization from user-supplied input. Impact is high (C/H/I/H) per IBM’s assessment, enabling unauthorized access despite authentication. Root cause:...
CVE-2026-16879
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input...
CVE-2026-16221
A flaw was found in fast-uri. This vulnerability arises because fast-uri does not correctly interpret backslash characters as authority delimiters in Uniform Resource Locators URLs, unlike Node.js's native WHATWG URL parser. This discrepancy can cause applications that use fast-uri for security...
MINI-5R49-QFM8-7JFP
Bulletin has no description...
