259661 matches found
PT-2026-101311
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100597
ghsa-c3fc-8qff-9hwx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100801
Security vulnerability affects the apicurio-registry package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95390
Name of the Vulnerable Software and Affected Versions wildfly-elytron-asn1 affected versions not specified Description A resource exhaustion flaw exists in the DERDecoder class. A remote attacker can trigger a Denial of Service DoS by sending a specially crafted DER Distinguished Encoding Rules...
PT-2026-95246
Name of the Vulnerable Software and Affected Versions Tz Weekly Radio Schedule versions prior to 1.8.2 Description The plugin fails to sanitize and escape a parameter used to construct a SQL query within an AJAX action accessible to unauthenticated users. This allows remote attackers to execute S...
PT-2026-95627
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An authenticated privileged CLI user can execute arbitrary shell commands with root privileges. This occurs due to a command injection flaw in the create csr wildcard CLI command via the...
PT-2026-95646
Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The extension manages partitioned tables by time or ID. The functions run maintenance, show partitions, show partition info, undo partition, and partition data time interpolate the writable part...
PT-2026-95223
Name of the Vulnerable Software and Affected Versions RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg versions prior to 1.5.3 Description Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access and above to perform Stored Cross-Si...
PT-2026-95649
Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The inherit template properties function manually surrounds primary-key column names from pg attribute.attname with double quotes without escaping embedded double-quote characters. A user with...
PT-2026-101999
ghsa-4hfp-h4cw-hj8p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101261
Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101165
Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100389
ghsa-3p8m-j85q-pgmj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-95356
Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists in the RedisArrayAggregator component of Netty. A remote attacker can cause heap memory exhaustion and a Denial of Service DoS by sending specially crafted nested Redis RESP array...
PT-2026-95389
Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw in the STOMP codec allows a remote, unauthenticated attacker to cause a Denial of Service DoS by sending a specially crafted STOMP frame. The issue occurs when the content-length header...
PT-2026-95279
Name of the Vulnerable Software and Affected Versions Download Manager versions prior to 3.3.69 Description An Insecure Direct Object Reference IDOR exists in the duplicate function hooked on admin init. The issue occurs because the handler verifies only the generic edit posts capability and a...
PT-2026-100934
ghsa-7pwc-h2j2-rjgj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-102088
ghsa-vvjj-xcjg-gr5g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101551
Security vulnerability affects the n8n package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100219
ghsa-j26w-f9rq-mr2q affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101593
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95484
Name of the Vulnerable Software and Affected Versions Azkaban versions prior to 4.0.1 Description An authorization bypass exists in the fetchSchedule action of the ScheduleServlet endpoint. Authenticated users can retrieve schedule configurations for any project by providing arbitrary project and...
PT-2026-100115
ghsa-9h8m-3fm2-qjrq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101494
Security vulnerability affects the prometheus-blackbox-exporter package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100470
ghsa-65xw-vw82-r86x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101446
ghsa-4m7w-qmgq-4wj5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-102143
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100089
Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100857
ghsa-6v67-2wr5-gvf4 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101201
Security vulnerability affects the opentelemetry-collector-contrib package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-99996
Security vulnerability affects the ffmpeg package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100958
Security vulnerability affects the gptscript package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101473
ghsa-f4v5-65jj-pcr2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101738
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100275
Security vulnerability affects the opensearch package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101269
ghsa-293q-567p-wmwq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100744
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100591
Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95595
Name of the Vulnerable Software and Affected Versions osmo-bsc versions 1.0.1 through 1.14.1 Description A heap based buffer overflow occurs in the ipaccess proxy read msg function when processing IPA frame lengths. A heap based buffer overflow is a condition where a program writes more data to a...
PT-2026-100243
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95303
Name of the Vulnerable Software and Affected Versions Bar Association Website versions through 18092026 Description Improper neutralization of input during web page generation leads to a Reflected Cross-Site Scripting XSS issue. Reflected XSS occurs when an application includes untrusted data in ...
PT-2026-100033
Security vulnerability affects the binutils package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101859
Security vulnerability affects the composer package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101083
ghsa-6jqx-86gh-f27w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100014
ghsa-hp87-p4gw-j4gq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-102223
ghsa-442j-39wm-28r2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-95502
A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debug interface without requiring authentication. An attacker with physical access could interrupt the normal boot process and access functionality that permits inspection or...
PT-2026-95210
Name of the Vulnerable Software and Affected Versions Deck affected versions not specified Description The Deck config API allows authenticated users to set board-scoped configuration keys for arbitrary board IDs. This occurs because the system fails to validate whether the user owns or has the...