380457 matches found
PT-2026-95553
Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.18 Description The OpenSSL and GnuTLS backends in pjlib/src/pj/ssl sock ossl.c and pjlib/src/pj/ssl sock gtls.c use string functions that recalculate length and truncate embedded NUL bytes when copying DNS...
PT-2026-95692
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper neutralization of input during web page generation allows a remote attacker to execute arbitrary code. Recommendations At the moment, there is no information about a newer version...
PT-2026-101505
Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101675
Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101835
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95231
Name of the Vulnerable Software and Affected Versions MasterStudy LMS WordPress Plugin versions prior to 3.7.50 Description Insufficient per-object ownership or capability checks occur when updating orders via the REST API. This allows users with the Instructor role to modify any order on the sit...
PT-2026-100484
Security vulnerability affects the n8n package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95699
Name of the Vulnerable Software and Affected Versions Cotonti version 1.0.0 Description Password recovery validation tokens are derived from md5microtime within the users.passrecover.php file, resulting in a predictable token space of approximately one million values per second. Unauthenticated...
PT-2026-95690
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An issue exists where a remote authenticated attacker can obtain sensitive information. This occurs due to improper neutralization of special elements used in an SQL command, a condition...
PT-2026-99994
Security vulnerability affects the harbor-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101137
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100552
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101218
Security vulnerability affects the postgresql16 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95280
Name of the Vulnerable Software and Affected Versions TECHIN2B Application versions V1.0.7676.13 through 18092026 Description An authorization bypass exists due to a user-controlled key, which allows for privilege abuse within the application. Recommendations At the moment, there is no informatio...
PT-2026-101941
ghsa-m959-cc7f-wv43 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101553
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100192
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95669
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A path traversal issue allows a remote authenticated attacker to access and traverse directories on the system. Path traversal is a flaw that allows an attacker to use special characters to...
PT-2026-101567
ghsa-xxqh-mfjm-7mv9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101828
ghsa-cj8j-37rh-8475 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-102230
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95315
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager DSM versions prior to 7.2.1-69057-12 Synology DiskStation Manager DSM versions prior to 7.2.2-72806-9 Synology DiskStation Manager DSM versions prior to 7.3.2-86009-4 Synology DiskStation Manager DSM versions prior...
PT-2026-100253
ghsa-9m89-8frq-c98c affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-102171
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100993
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100282
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100181
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101394
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101092
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102129
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102201
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102266
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102257
Security vulnerability affects the busybox package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102192
Security vulnerability affects the rust package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101431
Security vulnerability affects the busybox package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101960
Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102140
Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100084
ghsa-8qvm-5x2c-j2w7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-102046
Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-99980
rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bit string flags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so raw bits.len - 1 underflows o...
PT-2026-101580
Security vulnerability affects the cluster-proportional-autoscaler package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101477
ghsa-5w86-c3rq-vjj7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-95478
Name of the Vulnerable Software and Affected Versions CareCam CM2507 affected versions not specified Description IP cameras accept an empty password for a privileged account exposed through the ONVIF management service. An attacker with network access to the device can access privileged managemen...
PT-2026-95719
Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.5 Description Insufficient publish access control in the 'getDynamicIcon' endpoint allows users with read-only tokens to access document metadata. By calling this endpoint with the type parameter set to 8 and...
PT-2026-102040
Security vulnerability affects the openldap package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100805
Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-99708
Name of the Vulnerable Software and Affected Versions Obot versions prior to 0.23.0 Description When running with OBOT SERVER ENABLE AUTHENTICATION=true, the software exposes OAuth dynamic client registration without authentication and without restrictions on redirect URIs. This allows an...
PT-2026-101723
ghsa-pc3f-x583-g7j2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...