475452 matches found
ROOT-APP-MAVEN-CVE-2026-45367 CVE-2026-45367 in ca.uhn.hapi.fhir:org.hl7.fhir.validation - Patched by Root
Root has patched CVE-2026-45367 in the ca.uhn.hapi.fhir:org.hl7.fhir.validation package for Root:Maven. Multiple fixed versions available...
VMware VRealize Network Insight - Remote Code Execution
VMWare Aria Operations for Networks vRealize Network Insight is vulnerable to command injection when accepting user input through the Apache Thrift RPC interface. This vulnerability allows a remote unauthenticated attacker to execute arbitrary commands on the underlying operating system as the ro...
IBM Planning Analytics - Authentication Bypass & Remote Code Execution Version Detection
IBM Planning Analytics versions 2.0.0 through 2.0.8 are vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scripting. id: CVE-2019-4716 info: name: IBM Planning Analytics - Authentication Bypass & Remote...
strapi CMS <3.0.0-beta.17.5 - Admin Password Reset
strapi CMS before 3.0.0-beta.17.5 allows admin password resets because it mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js. id: CVE-2019-18818 info: name: strapi CMS 3.0.0-beta.17.5 - Admin Password Reset...
MINI-X544-WHXQ-G7RQ
Bulletin has no description...
MINI-Q874-V444-7JGQ
Bulletin has no description...
CVE-2026-46382
The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...
ROS-20260813-73-0017
The vulnerability in Gitea is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to cause service failures...
PT-2026-71880
Trigger.dev is the open-source platform for building AI workflows in TypeScript. From 4.4.2 until 4.5.0, the packet presign routes in apps/webapp/app/routes/api.v1.packets.$.ts pass a caller-controlled filename through resolveStoreProtocolForPacketPresign to generatePresignedUrl and...
PT-2026-71818
IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write...
PT-2026-71477
Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg hba.conf rules, via initial direct TLS connection. Despite a pg hba.conf that appears to require GSSAPI, the connection may exchange data over TLS encryption alone. If the TLS...
PT-2026-71404
Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows...
PT-2026-71921
Trix is a what-you-see-is-what-you-get rich text editor for everyday writing. Prior to 2.1.18, Trix is vulnerable to stored cross-site scripting when crafted HTML is pasted into the editor. HTMLParser processes a mock attachment in a with an empty data-trix-attachment="" value, causing...
PT-2026-71675
vLLM is an inference and serving engine for large language models. From 0.19.0 until 0.26.0, the /v1/completions CompletionRequest.prompt field in vllm/entrypoints/openai/completion/protocol.py accepts an unbounded liststr or listlistint, prompt to seq in vllm/renderers/inputs/preprocess.py and...
EUVD-2026-57701
The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms. Prior to version 1.12.2, a user-supplied private/local URI can be made to be fetched without checks. Version 1.12.2 contains a fix. No known workarounds are available...
CVE-2026-46688
CVE-2026-46688 affects the Meeting Room Booking System (MRBS) prior to version 1.12.2, where an unauthenticated request can trigger a redirect to a caller-controlled URL. This open redirect could lead users to attacker-specified sites, including a spoofed MRBS login page. The issue is fixed in MR...
CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-64471 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-63810 affecting package kernel for versions less than 6.6.145.2-1
CVE-2026-63810 affecting package kernel for versions less than 6.6.145.2-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6
CVE-2026-59890 affecting package python-setuptools for versions less than 69.0.3-6. A patched version of the package is available...