319403 matches found
Cisco Advance Notification for Publication of August 5, 2026, Security Advisories
On August 5, 2026, the Cisco Product Security Incident Response Team PSIRT published the following advisories: Cisco Security Advisory CVE ID Security Impact Rating CVSS Base Score Cisco Catalyst SD-WAN Software Security Hardening Release: August 2026...
CVE-2026-17550
CVE-2026-17550 describes an out-of-bounds read vulnerability in Autodesk AutoCAD when parsing malicious DWG/DXF files. The issue affects the DWG/DXF parsing component and can cause a crash or disclosure of sensitive information. According to the provided metrics, the CVSSv3.1 base score is 5.5 (M...
EUVD-2026-50373
A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: spire1.14: spire1.14-1.14.7-0.3.hum1 aarch64, x8664 spire1.14-agent-1.14.7-0.3.hum1 aarch64, x8664 spire1.14-oidc-discovery-provider-1.14.7-0.3.hum1 aarch64, x8664 spire1.14-server-1.14.7-0.3.hum...
WordPress Project Management, Bug and Issue Tracking Plugin plugin < 5.1.0 - Unauthenticated SQL Injection vulnerability
Unauthenticated SQL Injection vulnerability discovered by Mokksh Parekh in WordPress Plugin Software Issue Manager versions 5.1.0...
WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Profile Builder versions = 3.16.5...
RHSA-2026:36862 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
Bulletin has no description...
CVE-2026-58187
CVE-2026-58187 affects the Apache Traffic Server multiplexer plugin. The issue overruns the plugin’s chunk-decode buffer using upstream input, enabling a denial of service. Affected versions are 8.0.0–8.1.9, 9.0.0–9.2.14, and 10.0.0–10.1.3. Apache recommends upgrading to 9.2.15 or 10.1.4, which c...
CVE-2026-58177
The CVE-2026-58177 entry describes memory-safety issues in the Apache Traffic Server Cripts framework, including out-of-bounds writes, path traversal, and use-after-free errors affecting 10.0.0–10.1.3. The issue is mitigated by upgrading to version 10.1.4, which fixes the vulnerability. The conne...
EUVD-2026-50219
Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corrupting state or crashing. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which...
EUVD-2026-50216
The FAB auth manager's Azure AD OAuth login defaulted verifysignature=False when decoding the ID token, so an attacker able to present a forged or unsigned alg:none ID token to the OAuth callback could bypass authentication and log in as an arbitrary user, including one holding the Admin role...
CVE-2026-58154 Apache Traffic Server: Memory-safety errors in MIME and header parsing
Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP headers. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.11, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 9.2.15 or 10.1.4, which f...
BELL-CVE-2026-64506 CVE-2026-64506 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64498 CVE-2026-64498 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64427 CVE-2026-64427 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64285 CVE-2026-64285 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64211 CVE-2026-64211 does not affect BellSoft software
Bulletin has no description...
BELL-CVE-2026-64238 CVE-2026-64238 does not affect BellSoft software
Bulletin has no description...