CVE-2023-45858

CVE-2023-45858 is a directory traversal vulnerability in Paessler PRTG versions prior to 23.4.88.1429 , allowing an unauthenticated, remote attacker to read local files. The CVSS v3.1 score is 8.6 (HIGH) with a changed scope and high confidentiality impact , while integrity and availability are u...

PT-2026-91182

A security vulnerability has been detected in marcobambini Gravity up to 0.9.7. This affects an unknown function of the file src/utils/gravity json.c of the component udp json-parser. Such manipulation leads to integer overflow. The attack may be performed from remote. The exploit has been...

PT-2026-91422

IBM WebSphere Application Server 9.0, and 8.5 is affected by an authorization bypass vulnerability...

PT-2026-91453

IBM WebSphere Application Server 9.0, and 8.5 is affected by a reflected cross-site scripting vulnerability...

PT-2026-91728

Name of the Vulnerable Software and Affected Versions IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.6 1 IBM Sterling File Gateway versions 6.2.1.0 through 6.2.1.2 IBM Sterling File Gateway versions 6.2.2.0 through 6.2.2.1 Description Improper access control allows a remote attacker to...

python-tornado security update

6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247266...

CVE-2023-28148

A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...

PT-2026-92181

Name of the Vulnerable Software and Affected Versions znc versions prior to 1.10.3-1.1 Description Security issues were identified and subsequently fixed in the znc-1.10.3-1.1 package on the GA media of openSUSE Tumbleweed. Recommendations Update to version 1.10.3-1.1...

CVE-2023-37252

CVE-2023-37252 affects the CheckUser extension for MediaWiki through version 1.39.3 . The Special:CheckUserLog page displays usernames that were intended to be hidden, resulting in an information disclosure to users with low privileges. The CVSS 3.1 base score is 3.1 (LOW) with a network attack v...

PT-2026-91042

A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520...

PT-2026-91433

Name of the Vulnerable Software and Affected Versions IBM App Connect Enterprise versions 13.0.1.0 through 13.0.8.0 IBM App Connect Enterprise versions 12.0.1.0 through 12.0.12.27 Description Insecure deserialization allows a local attacker to execute arbitrary code. Deserialization is the proces...

CVE-2026-25832

In Mbed TLS 3.6.x before 3.6.7 and 4.1.x before 4.1.2, the TLS 1.3 client accepts HelloRetryRequest selecting an unadvertised group...

PT-2026-91426

IBM WebSphere Application Server 9.0, and 8.5 is affected by an authentication bypass vulnerability when using XD or Intelligent-Management features...

python-tornado security update

6.5.8-0.1 - Update to 6.5.8 Resolves: RHEL-247281...

CVE-2026-36989

A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php...

CVE-2026-90783

MKVToolNix through 101.0 contains a heap buffer overflow in the bundled avilib library's ODML superindex parser due to integer wraparound in 32-bit arithmetic. Attackers can craft a malicious AVI file with oversized entry counts that cause an undersized heap allocation, allowing a heap buffer...

CVE-2026-90678

An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. Exploitation requires an HTTP/3 frontend: HAProxy must be built with QUIC support and configured with a QUIC bind listener, and the affected traffic must reach a backend over HTTP/1.1 using chunked transfer...

CVE-2026-29811

CyberPanel before 2.4.4 attempts to detect an "alais" domain i.e., a second domain that serves the same content as a primary domain; normally spelled "alias" via an ORM query filter rather than a Python "if" statement...

EUVD-2026-77074

CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic...

PT-2026-90960

Name of the Vulnerable Software and Affected Versions LuxSoft LuxCal versions prior to 5.3.4L Description A SQL Injection issue exists where an attacker can interfere with the queries that an application makes to its database. This occurs via the 'rssfeed.php' and 'common/retrieve.php' endpoints...