42114 matches found
Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by CVE-2026-1605
Summary Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by CVE-2026-1605, CVE-2026-1605 is a high-severity vulnerability in the Eclipse Jetty web server caused by improper resource management in the GzipHandler component. IBM Engineering Systems Design Rhapsody has resolve...
Security Bulletin: IBM Engineering Systems Design Rhapsody was affected by CVE-2026-21945, CVE-2026-21932, CVE-2026-21933, CVE-2026-21925
Summary Security Bulletin: IBM Engineering Systems Design Rhapsody was using Older version of Java which as per Oracle's January 2026 Critical Patch Update, all affecting Oracle Java SE and related GraalVM runtimes. Collectively, they highlight weaknesses in how Java handles untrusted code,...
Linux Distros Unpatched Vulnerability : CVE-2026-10143
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker ...
CVE-2025-55650
A heap use-after-free in the gfnodegettag function scenegraph/basescenegraph.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
Linux Distros Unpatched Vulnerability : CVE-2026-8357
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice Calc compiles cell formulas when opening a spreadsheet. A heap buffer overflow existed when compiling a very long formula made up of many opening...
CVE-2025-55643
A NULL pointer dereference in the TrackWriter handling component filters/muxisom.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55649
A NULL pointer dereference in the gfmediamapesd function mediatools/isomtools.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2026-11526
GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open of filename arguments in makefilehandle. GD::Image::makefilehandle opens a filename argument with Perl's 2-arg open, so a filename that begins or ends with a pipe "| cmd", "cmd |" or begins with a...
CVE-2026-48156 vulnerabilities
Vulnerabilities for packages: litellm, open-webui...
GHSA-248M-82V9-Q6G6 vulnerabilities
Vulnerabilities for packages: litellm, open-webui...
GHSA-H2QV-FJ59-J46J vulnerabilities
Vulnerabilities for packages: apicurio-registry, celeborn, apache-pulsar, neo4j, tez, apache-activemq-artemis, thingsboard, zipkin, management-api-for-apache-cassandra-5.0...
CVE-2026-48059 vulnerabilities
Vulnerabilities for packages: apicurio-registry, celeborn, apache-pulsar, neo4j, tez, apache-activemq-artemis, thingsboard, zipkin, management-api-for-apache-cassandra-5.0...
CVE-2026-48096 vulnerabilities
Vulnerabilities for packages: grafana...
CVE-2026-11638 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-11697 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-48006 vulnerabilities
Vulnerabilities for packages: celeborn, thingsboard, management-api-for-apache-cassandra-5.0, tez...
CVE-2026-53438 vulnerabilities
Vulnerabilities for packages: jenkins...
GHSA-RCVQ-M9J9-6F4G vulnerabilities
Vulnerabilities for packages: kibana...