567 matches found
ROOT-OS-ALPINE-322-CVE-2026-5773 CVE-2026-5773 in curl - Patched by Root
Root has patched CVE-2026-5773 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...
ROOT-OS-ALPINE-322-CVE-2026-12064 CVE-2026-12064 in curl - Patched by Root
Root has patched CVE-2026-12064 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...
Astra Linux – Vulnerability in Redis
Redis is an open-source, in-memory database that persists data on disk. Versions 8.2.1 and earlier allow an authenticated user to use a specially crafted Lua script to read out-of-bounds data or cause the server to crash, resulting in a denial of service attack. This vulnerability exists in all...
Astra Linux – Vulnerability in imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, there was a heap buffer overflow vulnerability in the ReadYUVImage function coders/yuv.c, when processing malicious YUV 4:2:2 NoInterlace images. This...
Astra Linux – Vulnerability in golang-github-golang-jwt-jwt
golang-jwt is a Go implementation of JSON Web Tokens. Starting from version 3.2.0 and before versions 5.2.2 and 4.5.2, the parse.ParseUnverified function splits its argument which is untrusted data using periods. As a result, in the case of a malicious request where the Authorization header...
Security Bulletin: Security Vulnerability in Axios affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-40175)
Summary IBM Sterling B2B Integrator and IBM Sterling File Gateway have addressed vulnerability due to Axios Vulnerability Details CVEID:CVE-2026-40175 DESCRIPTION: Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific...
IBM WebSphere eXtreme Scale 8.6.2.0 < 8.6.2.2 (7282872)
The version of IBM WebSphere eXtreme Scale installed on the remote host is prior to 8.6.2.2 IBM. It is, therefore, affected by multiple vulnerabilities as referenced in the 7282872 advisory. - Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function...
SUSE CVE-2026-69198
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...
CLSA-2026-1782089812 TuxCare security update for js-cookie (1 CVE)
TuxCare rebuilt js-cookie to address 1 CVE. Fixed in 2.2.1-tuxcare.1...
CLSA-2026-1777941832 TuxCare security update for net.sf.jasperreports:jasperreports (1 CVE)
TuxCare rebuilt net.sf.jasperreports:jasperreports to address 1 CVE. Fixed in 6.2.2-tuxcare.1...
CLSA-2026-1775435426 TuxCare security update for org.springframework.security (6 CVEs)
TuxCare rebuilt 19 org.springframework.security packages to address 6 CVEs. Fixed in 6.2.2-tuxcare.1...
CVE-2026-69198
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. Th...
JLSEC-2026-1118
A flaw has been found in LibRaw up to 0.22.0. This affects the function LibRaw::nikonloadpaddedpackedraw of the file src/decoders/decoderslibraw.cpp of the component TIFF/NEF. Executing a manipulation of the argument loadflags/rawwidth can lead to out-of-bounds read. It is possible to launch the...
Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the netty-codec-http library.(CVE-2026-33870).
Summary IBM Storage Protect Server uses the netty-codec-http library in certain components. A vulnerability in netty could allow attacker to exploit the parsing flaw to craft requests that are interpreted differently by intermediaries and backend servers, resulting in HTTP request smuggling and...
CVE-2026-8763 Name Constraints bypass via trailing dot in rfc822Name and URI
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
PT-2026-67519
The Ref::SignalGen component of fprime framework v4.2.2 does not validate the safety of user-controlled parameters, allowing attackers to cause a Denial of Service DoS via inputting unsafe parameters...
CLEANSTART-2026-YC42491 Security fixes in external-secrets 2.2.0-r0
Package external-secrets version 2.2.0-r0 fixes 29 vulnerabilities: CVE-2026-39820, CVE-2020-8912, CVE-2020-8911, ghsa-pjcq-xvwq-hhpj, ghsa-78h2-9frx-2jm8...
Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
Public exploit details released on July 27 show how an unauthenticated request can reach PHP's eval function inside vBulletin and execute code on an unpatched forum server. The attack requires no account, administrative access, or interaction from another user. SSD Secure Disclosure lists vBullet...
