116968 matches found
PYSEC-2026-3655 pypdf: Possible large memory usage for large /ToUnicode streams
Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory consumption. This requires parsing the /ToUnicode entry of a font with unusually large values, for example during text extraction. Patches This has been fixed in pypdf==6.15.0. Workarounds If you cannot...
EUVD-2026-55243
Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs. Users are recommended to upgrade to version 5.9.1, which fixes this issue...
CVE-2026-61899
Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs. Users are recommended to upgrade to version 5.9.1, which fixes this issue...
CVE-2026-61899
A vulnerability exists in the tapestry-core component of Apache Tapestry (version 5.5.0+ on all platforms). An attacker can exploit Incorrect Authorization by manipulating URLs to download sensitive classpath assets , which may lead to unauthorized access to internal application resources. Users ...
Security Bulletin:Vulnerability in GNU affects IBM Netezza Appliance
Summary The GNU package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2025-11083 Vulnerability Details CVEID:CVE-2025-11083 DESCRIPTION: A vulnerability has been found in GNU Binutils 2.45. The affected element is the function elfswapshdr in the...
CVE-2026-65819
A flaw was found in gopacket, a Go library for packet processing. Multiple layer decoders in gopacket use attacker-controlled lengths, counts, or offsets without proper validation against packet buffers. A remote, unauthenticated attacker can exploit this by sending a specially crafted packet,...
CVE-2026-32227
Apache Ranger versions prior to 2.9.0 are susceptible to an SQL Injection vulnerability in the lookup functionality . This flaw arises from the improper neutralization of special elements used in SQL commands, which could allow an attacker to insert malicious SQL statements into entry fields for ...
CVE-2026-32227 Apache Ranger: SQL Injection vulnerability in lookup functionality
SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects . Users are recommended to upgrade to version 2.9.0, which fixes the issue...
CVE-2026-32227
SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects . Users are recommended to upgrade to version 2.9.0, which fixes the issue...
CVE-2026-32227 Apache Ranger: SQL Injection vulnerability in lookup functionality
SQL Injection vulnerability vulnerability in Apache Ranger. This issue affects . Users are recommended to upgrade to version 2.9.0, which fixes the issue...
CVE-2026-40920
Privilege Escalation via URL Parameter is reported in Apache Ranger versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
EUVD-2026-55252
Privilege Escalation via URL Parameter is reported in Apache Ranger versions = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-42537
Remote Code Execution via JDBC URL Injection in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-42537
Apache Ranger versions prior to 2.9.0 (
CVE-2026-44416
Apache Ranger versions
EUVD-2026-55250
Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-44416
Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger = 2.8.0. Users are recommended to upgrade to version 2.9.0, which fixes this issue...
CVE-2026-55799
Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...