249039 matches found
SUSE CVE-2026-49254
unknown...
CVE-2026-11885
CVE-2026-11885 affects IBM PowerVM Hypervisor. A crafted OS hypervisor call can crash the hypervisor or compromise OS memory integrity. Affected firmware: FW1110.00–FW1110.20, FW1060.00–FW1060.71, and FW950.00–FW950.H1. Root cause cited as CWE-120 (Buffer Copy without Checking Size of Input). Rem...
CVE-2026-11885 Power System update in Buffer Copy
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity...
CVE-2026-11885 Power System update in Buffer Copy
IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity...
SUSE CVE-2026-58416
unknown...
SUSE CVE-2026-58423
LFS authentication bypass via malformed SSH sub-verb allows unauthorized read access to private repositories...
SUSE CVE-2026-64559
In the Linux kernel, the following vulnerability has been resolved: s390/pkey: Check length in PKEYVERIFYPROTK ioctl Explicitly check the buffer length request structure provided by user-space and fail, if it exceeds the buffer size...
EUVD-2026-51233
The Windows interactive service in OpenVPN 2.7alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process...
CVE-2026-13379
The Windows interactive service in OpenVPN 2.7alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a crafted search domain during the disconnection process...
CVE-2026-13379
CVE-2026-13379 affects the Windows interactive service component of OpenVPN, versions 2.7_alpha1 through 2.7.4. The vulnerability allows remote attackers to cause persistent DNS state pollution or a service crash by supplying a crafted search domain during the disconnection process. The connected...
CVE-2026-4978
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection. This issue affects Traffic Analysis System: from 30 before 34...
Malicious code in pretty-log-cli (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad32145cb24ae2a271cecb6379d30a531be17d84a0d71189d3a4afaec20af015 No malicious behavior was identified in this package version. There is no evidence of credential access, environment scraping, network exfiltration,...
CVE-2026-11707
IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administrative console login page...
CVE-2026-11383
IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by cross-site scripting in the Administrative Console...
EUVD-2026-51156
Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection. This issue affects Traffic Analysis System: from 30 before 34...
CVE-2026-4978
CVE-2026-4978 describes an SQL injection in UMAI Vision Traffic Analysis System. The vulnerability arises from improper neutralization of special elements in SQL commands. Affected software: Traffic Analysis System (listed as: from 30 before 34). CVSS v3.1 base metrics indicate a critical impact ...
EUVD-2026-51149
Swarms through 6.8.1, fixed in commit 8b0fc9e, contains a server-side request forgery vulnerability in the issafeurl function that fails to validate hostnames through DNS resolution, allowing attackers to bypass the blocklist. Attackers can supply user-controlled image or audio URLs that resolve ...
CVE-2026-58218
A flaw was found in Samba's internal DNS server where unauthenticated TKEY registration requests were added to the TKEY name cache before being rejected. A remote, unauthenticated attacker can exploit this behavior by sending a large number of TKEY requests with arbitrary names, exhausting the...
CVE-2026-11707
CVE-2026-11707 affects IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager 4.1. The issue is a cross-site scripting vulnerability in the administrative console login page. IBM bulletins for this family (CVE-2026-11594, CVE-2026-11707, CVE-2026-11383) documen...