424073 matches found
PT-2026-117419
Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr load image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md...
PT-2026-117240
Name of the Vulnerable Software and Affected Versions Coinbase Commerce Payment Gateway for WooCommerce WordPress plugin versions prior to 1.4.2 Description The plugin fails to verify the authenticity of incoming payment webhook notifications. This occurs because the shared secret used to validat...
PT-2026-117247
Name of the Vulnerable Software and Affected Versions Document Gallery WordPress plugin versions prior to 5.1.2 Description Insufficient sanitization and escaping of several gallery shortcode attributes occur before they are embedded in a single-quoted HTML attribute within the rendered gallery...
PT-2026-117420
Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel bytes exceeding the palette length to leak up to 255 adjacent...
PT-2026-117228
Name of the Vulnerable Software and Affected Versions Gateway for Vantiv on WC WordPress plugin versions prior to 1.0.2 Description The plugin fails to verify the authenticity of payment notifications received by its hosted-payment return handler. This allows unauthenticated attackers to manipula...
PT-2026-132410
Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event loop by supplying single-branch repeated extglob patterns. Attackers can provide globs like + or +a, which analyzeRepeatedExtglob in lib/parse.js skips, causing exponenti...
PT-2026-132506
Fix uninitialized pointer dereference in libkrad...
PT-2026-117248
Name of the Vulnerable Software and Affected Versions Document Gallery WordPress plugin versions prior to 5.1.2 Description The plugin fails to verify the signature on an unauthenticated webhook endpoint when no shared secret is configured, which is the default setting. This allows unauthenticate...
PT-2026-117238
Name of the Vulnerable Software and Affected Versions ElementsReady Addons for Elementor WordPress versions prior to 6.7.3 Description The plugin fails to properly restrict access to protected WooCommerce product downloads. This allows unauthenticated users to bypass payment requirements and...
PT-2026-117474
Name of the Vulnerable Software and Affected Versions Netskope Client versions prior to R142 Description A gap in the NSClient agent occurs when a system connects to an access point with a Captive Portal and then switches to a network that already has internet connectivity, causing the Captive...
PT-2026-117518
Name of the Vulnerable Software and Affected Versions AIOHTTP versions prior to 3.14.4 Description An attacker can send an absolute-form request that causes Request.scheme to use attacker-controlled request-target scheme data instead of the connection protocol. Applications relying on...
PT-2026-117472
Name of the Vulnerable Software and Affected Versions Picomatch versions prior to 4.0.8 Description A regular expression denial of service ReDoS occurs when parsing single-branch repeated extglob patterns, such as + or +a. The analyzeRepeatedExtglob function in lib/parse.js fails to handle these...
PT-2026-117237
Name of the Vulnerable Software and Affected Versions ElementsReady Addons for Elementor WordPress versions prior to 6.7.3 Description Insufficient authorization checks in several settings-save handlers allow users with subscriber-level access and above to overwrite stored settings. This includes...
PT-2026-132411
Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event loop by supplying single-branch repeated extglob patterns. Attackers can provide globs like + or +a, which analyzeRepeatedExtglob in lib/parse.js skips, causing exponenti...
PT-2026-132407
Netpbm through 11.16.00 contains a heap out-of-bounds write vulnerability in the rasttopnm Sun rasterfile run-length decoder pr load image in converter/other/rast.c. Attackers can supply a byte-encoded rasterfile with tiny dimensions and a long run-length body to write controlled bytes past md...
PT-2026-132412
Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module QtSvg in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted SVG file with deeply nested elements...
PT-2026-132409
Picomatch through 4.0.7 contains a regular expression denial of service vulnerability that allows attackers to block the event loop by supplying single-branch repeated extglob patterns. Attackers can provide globs like + or +a, which analyzeRepeatedExtglob in lib/parse.js skips, causing exponenti...
PT-2026-132408
Netpbm through 11.16.00 contains a heap out-of-bounds read vulnerability in rasttopnm that allows attackers to read heap memory by supplying Sun rasterfiles with short colormaps. Attackers can craft colormapped rasterfiles with pixel bytes exceeding the palette length to leak up to 255 adjacent...
PT-2026-132587
TuxCare rebuilt @babel/runtime-corejs3 to address 1 CVE. Fixed in 7.11.5-tuxcare.3...
PT-2026-132549
TuxCare rebuilt @react-router/cloudflare to address 2 CVEs. Fixed in 7.5.1-tuxcare.1...
PT-2026-132553
TuxCare rebuilt @react-router/cloudflare to address 1 CVE. Fixed in 7.5.1-tuxcare.7...
PT-2026-132544
TuxCare rebuilt @react-router/architect to address 1 CVE. Fixed in 7.5.1-tuxcare.7...
PT-2026-132552
TuxCare rebuilt @react-router/cloudflare to address 1 CVE. Fixed in 7.5.1-tuxcare.8...
PT-2026-132590
TuxCare rebuilt @babel/runtime-corejs3 to address 1 CVE. Fixed in 7.23.2-tuxcare.2...
PT-2026-132551
TuxCare rebuilt @react-router/cloudflare to address 1 CVE. Fixed in 7.5.1-tuxcare.6...
PT-2026-132588
TuxCare rebuilt @babel/runtime-corejs3 to address 1 CVE. Fixed in 7.16.7-tuxcare.3...
PT-2026-132708
TuxCare rebuilt create-react-router to address 1 CVE. Fixed in 7.5.1-tuxcare.6...
PT-2026-132707
TuxCare rebuilt create-react-router to address 3 CVEs. Fixed in 7.5.1-tuxcare.5...
PT-2026-132697
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.18.4.1-tuxcare.1...
PT-2026-132711
TuxCare rebuilt create-react-router to address 1 CVE. Fixed in 7.5.1-tuxcare.9...
PT-2026-132704
TuxCare rebuilt nodemailer to address 2 CVEs. Fixed in 9.0.0-tuxcare.4...
PT-2026-132702
TuxCare rebuilt axios to address 11 CVEs. Fixed in 1.18.0-tuxcare.2...
PT-2026-132591
TuxCare rebuilt @babel/runtime-corejs3 to address 1 CVE. Fixed in 7.26.9-tuxcare.1...
PT-2026-132554
TuxCare rebuilt @react-router/cloudflare to address 1 CVE. Fixed in 7.5.1-tuxcare.9...
PT-2026-132547
TuxCare rebuilt @react-router/architect to address 1 CVE. Fixed in 7.5.1-tuxcare.9...
PT-2026-132672
TuxCare rebuilt @react-router/serve to address 3 CVEs. Fixed in 7.5.1-tuxcare.10...
PT-2026-132655
TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.29.0-tuxcare.2...
PT-2026-132659
TuxCare rebuilt @babel/plugin-transform-sticky-regex to address 1 CVE. Fixed in 7.18.9-tuxcare.3...
PT-2026-132528
TuxCare rebuilt @babel/plugin-transform-react-jsx-self to address 1 CVE. Fixed in 7.18.9-tuxcare.2...
PT-2026-132695
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.11.2-tuxcare.1...
PT-2026-132705
TuxCare rebuilt @storybook/blocks to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
PT-2026-132709
TuxCare rebuilt create-react-router to address 1 CVE. Fixed in 7.5.1-tuxcare.7...
PT-2026-132710
TuxCare rebuilt create-react-router to address 1 CVE. Fixed in 7.5.1-tuxcare.8...
PT-2026-132700
TuxCare rebuilt nodemailer to address 1 CVE. Fixed in 9.0.1-tuxcare.3...
PT-2026-132703
TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 4.3.12-tuxcare.3...
PT-2026-132713
TuxCare rebuilt create-react-router to address 1 CVE. Fixed in 7.18.1-tuxcare.1...
PT-2026-132694
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.12.2-tuxcare.1...
PT-2026-132698
TuxCare rebuilt axios to address 12 CVEs. Fixed in 1.17.0-tuxcare.3...