GHSA-8G9R-MP6V-7M38 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-RHRM-PW3P-V8J2 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-6484

In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution...

PT-2026-71165

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper authorization may allow a remote authenticated attacker to bypass security restrictions. Recommendations At the moment, there is no information about a newer version that contains a fix for...

The vulnerability of the JetBrains YouTrack project and task management software lies in the lack of authentication for critical functions. This allows attackers to bypass existing security mechanisms and gain unauthorized access to protected information.

The vulnerability of the JetBrains YouTrack project and task management software is related to the lack of authentication for a critical function. Exploiting this vulnerability allows an attacker to bypass existing security mechanisms and gain unauthorized access to protected information...

The vulnerability of the Neo4j Cypher MCP server, related to the data source verification error, allows attackers to bypass existing security restrictions and execute arbitrary code.

The vulnerability of the Neo4j Cypher MCP server is related to a data source verification error. Exploiting this vulnerability allows an attacker to bypass existing security restrictions and execute arbitrary code...

ROS-20260812-73-0012

The vulnerability of the BuildKit container-building software is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

PT-2026-71226

Name of the Vulnerable Software and Affected Versions LXD affected versions not specified Description An improper validation issue in the instancePostMigration function within lxd/instance post.go allows an authenticated attacker with can create instances permissions on a restricted project to...

CVE-2026-17095: Improperly Controlled Modification of Dynamically-Determined Object Attributes

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to unsafe reflection...

PT-2026-71168

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A race condition allows a remote authenticated attacker to bypass security restrictions and obtain sensitive information. A race condition is a situation where the system's behavior depends on the...

The vulnerability of the mechanism for recording audit entries for system calls to the ptrace() function in the operating system kernel of FreeBSD allows a perpetrator to bypass existing security mechanisms.

The vulnerability of the mechanism for recording audit entries for system calls to the ptrace function in FreeBSD operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to bypass existing security mechanisms...

Linux Distros Unpatched Vulnerability : CVE-2026-62899

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a...

Linux Distros Unpatched Vulnerability : CVE-2026-62992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. Prior to 5.8.2 and 4.5.7 on the 4.x line,...

CVE-2026-18246: Interpretation Conflict

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to an interpretation conflict in the multipart parser...

CVE-2026-18144: Improper Authorization

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization...

CVE-2026-18250: Concurrent Execution using Shared Resource with Improper Synchronization

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to a race condition...

PT-2026-71157

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description A remote authenticated attacker can bypass security restrictions due to unsafe reflection. Reflection is a process that allows a program to inspect and modify its own structure and behavior at runtime...

GitLab 19.2 < 19.2.2 (CVE-2026-16627)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.2... CVE-2026-16627 Note that Nessus has not tested for this issue but has instead relied only on the...

GHSA-3RRR-JR9J-H3Q3 vulnerabilities

Vulnerabilities for packages: langfuse...

Security Bulletin: IBM i is Affected By Improper Validation Vulnerability in Line Printer Daemon [CVE-2026-17445]

Summary IBM i is vulnerable to bypassing security restrictions due to improper validation CVE-2026-17445 in Line Printer Daemon LPD as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17445 DESCRIPTION: IBM i could allow a remote authenticated attacker to bypas...