259661 matches found
PT-2026-101102
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95295
The Location Manager plugin for WordPress is vulnerable to generic SQL Injection via 'latitude' and 'longitude' REST API Parameters in all versions up to, and including, 2.3.38 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query...
PT-2026-95695
Name of the Vulnerable Software and Affected Versions Svelte devalue versions 5.1.0 through 5.9.2 Description The stringify and uneval functions serialize typed arrays by emitting the entire backing ArrayBuffer instead of only the view. When serializing a Node Buffer, which uses a process-wide...
PT-2026-95600
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server 9.0 IBM WebSphere Application Server 8.5 Description Log injection is possible through the use of crafted LTPA Lightweight Third-Party Authentication token cookies. This allows an attacker to insert malicious...
PT-2026-101953
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101866
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100804
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100778
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95367
Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-31 ImageMagick versions prior to 6.9.13-56 Description A NULL pointer dereference exists in the PNM coder. This occurs when the coder reaches a memory resource limit during processing and fails to handle the...
PT-2026-101028
ghsa-qffm-gf3j-6mvg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100802
Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100711
ghsa-f2g3-hh2r-cwgc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100984
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101040
Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95282
Name of the Vulnerable Software and Affected Versions Mapster WP Maps versions prior to 1.23.1 Description The plugin contains an Arbitrary User Meta Write flaw within the my profile update function. The issue occurs because the function fails to perform nonce verification, capability checks, and...
PT-2026-101194
Security vulnerability affects the stargate package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101303
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101009
Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101036
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101735
Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101230
Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101369
Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100293
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100445
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101659
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100397
Security vulnerability affects the postgresql17 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101815
Security vulnerability affects the apache-superset package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100028
Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102290
Summary In affected versions, the URL of a remote MCP server is attacker-controlled at registration and is fetched server-side with no validation of the destination. There is no guard against loopback, link-local, RFC1918 private ranges, or the cloud metadata endpoint 169.254.169.254, so a use wi...
PT-2026-101279
Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102183
ghsa-fv25-8xcx-gqjc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100288
Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-99972
rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bit string flags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so raw bits.len - 1 underflows o...
PT-2026-100674
Security vulnerability affects the pritunl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102113
Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100784
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101445
Security vulnerability affects the wildfly package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101221
Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101050
Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101524
ghsa-pw6j-qg29-8w7f affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101951
Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101558
ghsa-273p-m2cw-6833 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100281
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100044
Security vulnerability affects the nfs-subdir-external-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101403
Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100091
Security vulnerability affects the pgbouncer package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101892
ghsa-7rqj-j65f-68wh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100585
ghsa-x2wq-9x2f-fhj7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...