490185 matches found
CVE-2026-21074
Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege...
libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()
A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filteredbuf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of...
Security Bulletin:Vulnerability in urllib3 affects IBM Netezza Appliance
Summary The urllib3 package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-44431, CVE-2026-44432 Vulnerability Details CVEID:CVE-2026-44431 DESCRIPTION: urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirec...
Security Bulletin:Vulnerability in zstd affects IBM Netezza Appliance
Summary The zstd package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2021-24032 Vulnerability Details CVEID:CVE-2021-24032 DESCRIPTION: Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line...
Security Bulletin:Vulnerability in Sudo affects IBM Netezza Appliance
Summary The Sudo package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-35535 Vulnerability Details CVEID:CVE-2026-35535 DESCRIPTION: In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege dro...
WordPress FluentCommunity plugin <= 2.7.5 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Septio Noerdiansyah in WordPress Plugin FluentCommunity versions = 2.7.5...
Security Bulletin: IBM Storage Protect Operations Center is affected by multiple arbitrary code execution vulnerabilities(CVE-2026-8633).
Summary IBM Storage Protect Operations Center is affected by vulnerabilities that could allow remote, unauthenticated arbitrary code execution. Vulnerability Details CVEID:CVE-2026-8633 DESCRIPTION: IBM Web Server Plug-ins for WebSphere Application Server and WebSphere Liberty 8.5, 9.0 IBM...
CVE-2026-21084
Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information...
EUVD-2026-55109
Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information...
CVE-2026-21083
Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...
EUVD-2026-55108
Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...
CVE-2026-21083
CVE-2026-21083 affects Samsung Smart Switch software with improper input validation in versions before 3.7.72.6, enabling adjacent attackers to access sensitive data (confidentiality impact high). The description indicates the vulnerability is fixed in 3.7.72.6 or later; update to that version or...
CVE-2026-21083
Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...
CVE-2026-21082
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
CVE-2026-21082
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
CVE-2026-21080
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...
CVE-2026-21080
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...
CVE-2026-21080
The CVE-2026-21080 affects Smart Switch prior to version 3.7.72.6. It stems from cleartext storage of sensitive information, allowing adjacent attackers to access data. Mitigation: upgrade to 3.7.72.6 or later (as described in the provided references).