CVE-2026-79826 HPE NonStop OCAX - Heap buffer overflow vulnerability

A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow...

EUVD-2026-101992

A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow...

CVE-2026-76668

A security vulnerability exists in HPE NonStop Kernel (CWE-1260) which may allow user space access to privileged or unmapped data . Affected components include various software such as NONSTOP KERNEL T9050 , EXPAND T9057 , and XDR Streams T0248 , among many others listed in document HPESBNS05148....

CVE-2026-73797

A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called...

EUVD-2026-101005

A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called...

CVE-2026-73797

A memory corruption vulnerability exists in HPE NonStop TSQLFIL that may cause address space corruption when a specific API is called. The impact includes potential Denial of Service (DoS) , memory corruption, Buffer Overflow, and Stack Overflow. Affected versions include TSQLFIL T9196 - T9196L01...

CVE-2026-73797 HPE NonStop TSQLFIL - Memory corruption vulnerability

A security vulnerability in HPE NonStop TSQLFIL may cause address space corruption when a specific API is called...

Malicious code in pyyi (PyPI)

The verified PyPI wheel declares a console command named python2 pyyi.cli:main. For commands other than the local REPL, help, version, unlock, or uninstall paths, it obtains configuration and calls runpayload. Registration sends the hostname and OS to a configured space-z.ai server and stores the...

CVE-2026-63174

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users into spaces outside their authority because the spaceAffectList affectation was performed without verifying the caller's rights to the target space. Attackers ca...

CVE-2026-63174 Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users into spaces outside their authority because the spaceAffectList affectation was performed without verifying the caller's rights to the target space. Attackers ca...

CVE-2026-63174 Omnispace Agora Project < 26.10.0 Broken Access Control via spaceAffectList

Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users into spaces outside their authority because the spaceAffectList affectation was performed without verifying the caller's rights to the target space. Attackers ca...

CVE-2026-63174

Omnispace Agora Project versions prior to 26.10.0 are vulnerable to a broken access control vulnerability. The issue stems from a missing readRight() check within the import flow's join INSERT, which allows the spaceAffectList affectation to occur without verifying the caller's rights to the targ...

SUSE CVE-2026-109276

ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 contains an incomplete cleanup flaw in the JNG decoder that fails to remove temporary files when processing crafted input. Attackers can submit crafted JNG files for processing to repeatedly leak temporary files, consuming disk space and...

PT-2026-113342

Name of the Vulnerable Software and Affected Versions Omnispace Agora Project versions prior to 26.10.0 Description Broken access control allows a space administrator to assign users to spaces outside their authority. This occurs because the spaceAffectList affectation is performed without...

Incomplete Cleanup

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

Incomplete Cleanup

Overview Magick.NET-Q16-HDRI-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

Incomplete Cleanup

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Incomplete Cleanup

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Incomplete Cleanup

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

Incomplete Cleanup

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...