Unspecified Vulnerability in IBM PowerVM Hypervisor

The IBM PowerVM Hypervisor is a Type 1 bare metal virtualization hypervisor Hypervisor developed by IBM for its Power Systems server platform. An information disclosure vulnerability exists in IBM PowerVM Hypervisor versions FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00...

Apple多款产品 安全漏洞

Apple iOS is an operating system developed for mobile devices.Apple macOS is a specialized operating system developed for Mac computers.Apple iPadOS is an operating system for iPad tablets. A denial-of-service vulnerability exists in several Apple products, which can be exploited by an attacker t...

Important: Red Hat Security Advisory: Insights proxy Container Image

Initial GA Release of Red Hat Insights proxy The Insights proxy Container is used by the Insights proxy product RPM and serves as an intermediary between cystomer systems in disconnected networks, air-gapped systems or systems with no outside connections and Insights. The Insights proxy routes al...

php: Single byte overread with convert.quoted-printable-decode filter

A memory-related vulnerability was found in PHP’s filter handling system, particularly when processing input with convert.quoted-printable-decode filters. This issue can lead to a segmentation fault. This vulnerability is triggered through specific sequences of input data, causing PHP to crash...

GHSA-P9J9-QQWF-J574 vulnerabilities

Vulnerabilities for packages: samba...

GHSA-3C6G-7V4G-5XCM vulnerabilities

Vulnerabilities for packages: postgresql...

CVE-2007-6423 vulnerabilities

Vulnerabilities for packages: apache2...

GHSA-HRVR-7X5W-XPMQ vulnerabilities

Vulnerabilities for packages: python...

CVE-2024-5642 vulnerabilities

Vulnerabilities for packages: python...

GHSA-P9J9-QQWF-J574 vulnerabilities

Vulnerabilities for packages: samba...

GHSA-7G24-QG88-P43Q vulnerabilities

Vulnerabilities for packages: hadoop-fips...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the /api/file/getFile endpoint, which performs case-sensitive string equality checks to restrict access to sensitive files. An attacker can access protected configuration files by submitting mixed-case file paths...

2026-02 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems (KB5075912)

2026-02 Cumulative Update for Windows 10 Version 21H2 for x64-based Systems KB5075912...

2026-02 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5075912)

2026-02 Dynamic Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems KB5075912...

2026-02 Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems (KB5075912)

2026-02 Cumulative Update for Windows 10 Version 21H2 for ARM64-based Systems KB5075912...

2026-02 Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB5075904)

2026-02 Cumulative Update for Windows 10 Version 1809 for x64-based Systems KB5075904...

2026-02 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB5075999)

2026-02 Cumulative Update for Windows 10 Version 1607 for x64-based Systems KB5075999...

2026-02 Cumulative Update for Windows Server 2016 for x64-based Systems (KB5075999)

2026-02 Cumulative Update for Windows Server 2016 for x64-based Systems KB5075999...

CVE-2026-25530

Kanboard is project management software focused on Kanban methodology. Prior to 1.2.50, the getSwimlane API method lacks project-level authorization, allowing authenticated users to access swimlane data from projects they cannot access. This vulnerability is fixed in 1.2.50...

CVE-2025-35999

The CVE-2025-35999 entry concerns Intel System Firmware Update Utility (SysFwUpdt) on Intel Server Boards/Server Systems, affected before version 16.0.12. Affected component: SysFwUpdt; root cause: incorrect permission assignment for a critical resource in Ring 3. This enables a local attacker wi...