50823 matches found
CVE-2026-11897
IBM WebSphere Application Server Liberty (17.0.0.3–26.0.0.7) is affected by CVE-2026-11897, a denial-of-service vulnerability triggered by specially crafted HTTP/2 requests. The issue impacts Liberty with servlet-3.1/4.0/5.0/6.x features enabled, allowing a remote attacker to exhaust memory resou...
CVE-2026-11897 IBM WebSphere Application Server Liberty is affected by a denial of service vulnerability with HTTP/2
IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources...
MINI-M6X2-953M-X536
Bulletin has no description...
CVE-2026-67351 Serendipity < 2.6.1 Authentication Bypass via Username Collision
Serendipity before 2.6.1 contains an authentication context confusion vulnerability where password validation and session loading operate independently without ensuring both use the same user record. An authenticated Editor can create a username collision with an Administrator account and obtain...
CVE-2026-64785
A flaw was found in SwiftNIO HTTP/2. This vulnerability allows a remote attacker to perform HTTP request smuggling or response splitting. The issue stems from insufficient validation of incoming HTTP/2 HEADERS frames, which are parts of an HTTP/2 request. This allows special control characters,...
CVE-2026-7260
The CVE affects PHP’s phar handling, where circular symbolic links in phar archives can cause unbounded recursion, exhausting the C stack and crashing the PHP process. Affected versions are PHP 8.2.x before 8.2.33, 8.3.x before 8.3.33, 8.4.x before 8.4.24, and 8.5.x before 8.5.9. Root cause is un...
RHSA-2026:48225 Red Hat Security Advisory: perl:5.32 security update
Bulletin has no description...
RHSA-2026:48033 Red Hat Security Advisory: nodejs22 security update
Bulletin has no description...
CVE-2026-16971
The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks...
CVE-2026-62946
A flaw was found in ImageMagick. When processing extremely large JNX image files on 32-bit systems, an attacker could trigger an integer overflow. This overflow leads to a heap buffer over-write, which can cause the application to crash, resulting in a denial of service. Mitigation To mitigate th...
CVE-2026-16970
The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time...
CVE-2026-16969 DFIR-IRIS Stored XSS in Assets
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the assets function...
CVE-2026-16969 DFIR-IRIS Stored XSS in Assets
The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting XSS in the assets function...
CVE-2026-44909
A flaw was found in Proxygen. A remote, unauthenticated attacker could exploit a missing slow-consumer detection mechanism in the HTTP/2 protocol. By manipulating HTTP/2 flow-control settings, an attacker can force the server to buffer large amounts of data in memory indefinitely. This can lead t...
io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak
A flaw was found in Netty, a network application framework. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted HTTP/2 DATA frames to applications that use Netty and have HTTP/2 content decompression enabled. This can lead to memory exhaustion, causing t...
CLEANSTART-2026-WE18899 Security fixes in argo-workflows 3.7.9-r0
Package argo-workflows version 3.7.9-r0 fixes 2 vulnerabilities: ghsa-37cx-329c-33x3, CVE-2026-25934...
CLEANSTART-2026-HX55432 Security fixes in curl 8.9.0-r0
Package curl version 8.9.0-r0 fixes 2 vulnerabilities: CVE-2024-6197, CVE-2024-6874...
CLEANSTART-2026-YL92500 Security fixes in postgresql15 15.4-r0
Package postgresql15 version 15.4-r0 fixes 2 vulnerabilities: CVE-2023-39418, CVE-2023-39417...