1869 matches found
CVE-2026-116197
Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller that can prefer wildcard configuration entries over concrete domain matches. When a pull configuration lists both a concrete domain and its parent wildcard, registry credentials...
CVE-2026-116197 Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection
Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller that can prefer wildcard configuration entries over concrete domain matches. When a pull configuration lists both a concrete domain and its parent wildcard, registry credentials...
CVE-2026-116197
Edgeless Systems Contrast versions 1.21.0 through 1.25.0 are vulnerable to a credential leak due to a non-deterministic registry selection flaw in the imagepuller component. The flaw occurs when a pull configuration contains both a concrete domain and its parent wildcard; the system may incorrect...
PT-2026-123038
Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller that can prefer wildcard configuration entries over concrete domain matches. When a pull configuration lists both a concrete domain and its parent wildcard, registry credentials...
Amazon Linux 2023 : jackson-databind (ALAS2023-2026-3305)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3305 advisory. jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string...
CVE-2026-98839
A flaw was found in the Linux kernel's virtual terminal selection subsystem. When pasting console selections, a race condition can occur if another process concurrently replaces the selection buffer with shorter content while the operation is temporarily paused. This situation causes an integer...
Security Bulletin: IBM MQ Appliance is affected by an improper validation vulnerability (CVE-2026-12550)
Summary IBM MQ Appliance has addressed an improper validation vulnerability that could allow an authenticated attacker to obtain sensitive information or cause a denial of service. Vulnerability Details CVEID:CVE-2026-12550 DESCRIPTION: IBM MQ could allow an authenticated attacker to obtain...
HTTP Authority Confusion
io.netty, netty-codec-http3 is vulnerable to HTTP authority confusion. The vulnerability is due to the codec prioritizing the Host header over the authority specified in the absolute-form request-target, which allows a remote attacker to manipulate virtual-host routing, authorization checks,...
Coraza: URL-encoded Form Content-Type Parameters Bypass Coraza Body Inspection
Summary Coraza fails to inspect URL-encoded form bodies when their valid "Content-Type" contains a media-type parameter, for example: Content-Type: application/x-www-form-urlencoded; charset=UTF-8 An unauthenticated attacker can use this header to hide the complete form body from custom Coraza...
CVE-2026-98614
A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP subsystem. An attacker could exploit this vulnerability to cause a Denial of Service DoS by triggering an infinite loop during retransmission path selection. When all candidate network paths are in an unconfirmed...
CVE-2026-114115 Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection
Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parseIfExp that reads nested arrays with narrower inner bounds using the wider result type's memory layout. When a ternary selects the narrower array, inner arrays after the first are read at wrong offsets, causing...
CVE-2026-114115
Vyper versions 0.3.8 through 0.5.0b1 are affected by a compiler miscompilation vulnerability in parse_IfExp. The issue occurs when a ternary operator selects a nested array with narrower inner bounds, but the compiler uses the memory layout of the wider result type. This results in inner arrays a...
CVE-2026-114115 Vyper 0.3.8 through 0.5.0b1 Memory Misread via Ternary Nested Array Selection
Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parseIfExp that reads nested arrays with narrower inner bounds using the wider result type's memory layout. When a ternary selects the narrower array, inner arrays after the first are read at wrong offsets, causing...
Characterizing and Defending Utility-Hijacking in Instruction-Tuning Data Selection
Instruction-data selectors choose which instruction-following records are used for fine-tuning, improving alignment quality, raising training efficiency, and filtering out harmful records. A selector's choices thus directly affect the fine-tuned model's safety, yet despite their widespread use, t...
SUSE SLED15 / SLES15 Security Update : wpa_supplicant (SUSE-SU-2026:4588-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4588-1 advisory. This update for wpasupplicant fixes the following issue: - CVE-2026-78807: missing validation in driver-based PMKSA...
SUSE SLES15 Security Update : wpa_supplicant (SUSE-SU-2026:4590-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4590-1 advisory. This update for wpasupplicant fixes the following issue: - CVE-2026-78807: missing validation in driver-based PMKSA selection within...
UBUNTU-CVE-2026-112261
A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution...
CVE-2026-112261
A flaw was found in GIMP. Opening a crafted XCF that selects a path and then fails to load that path can cause a use-after-free in the main process, leading to a crash and potentially arbitrary code execution...
CLSA-2024-1725187614 kernel: Fix of 12 CVEs
drm/vmwgfx: Fix invalid reads in fence signaled events CVE-2024-36960 - afunix: Fix garbage collector racing against connect CVE-2024-26923 - ipv6: remove maxsize check inline with ipv4 CVE-2023-52340 - aoe: fix the potential use-after-free problem in aoecmdcfgpkts CVE-2023-6270 - smb: client:...
CVE-2026-98839
In the Linux kernel, the following vulnerability has been resolved: vt: selection: Fix unsigned underflow and slab-out-of-bounds read in pasteselection In pasteselection, the loop copies mintunsigned int, vcsel.buflen - pasted,tty-receiveroom bytes per iteration into ttyldiscreceivebuf and...