398099 matches found
PT-2026-100925
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95324
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-10 Synology DiskStation Manager versions prior to 7.2.2-72806-7 Synology DiskStation Manager versions prior to 7.3.2-86009-2 Description A path traversal issue exists in the Audio API,...
PT-2026-101555
Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95466
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server version 8.5 IBM WebSphere Application Server version 9.0 IBM WebSphere Liberty affected versions not specified Description IBM WebSphere Application Server and Liberty are susceptible to HTTP request smuggling,...
PT-2026-95609
IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vulnerability due to improper handling of Content-Length headers...
PT-2026-95612
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server affected versions not specified IBM WebSphere Application Server Liberty affected versions not specified Description IBM WebSphere Application Server and WebSphere Application Server Liberty are subject to HTTP...
PT-2026-100199
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101358
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100266
Security vulnerability affects the python3 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95248
Name of the Vulnerable Software and Affected Versions Easy Appointments versions 4.0 through 4.0.2.1 Description The plugin fails to perform ownership or authorization checks on the unauthenticated appointment-reservation endpoint. This allows unauthenticated attackers to overwrite or delete...
PT-2026-100460
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95305
Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description A Broken Access Control issue exists that allows a low-privileged user to obtain unauthorized access to administrative screens and functions intended for users with...
PT-2026-101856
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95625
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An issue exists in the New Query Builder REST Processor where a low-privileged authenticated user can perform a SQL injection. This occurs via the 'newQueryBuilder' REST endpoint, allowing...
PT-2026-95648
Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description When pg jobmon is installed and part config.jobmon is set to true, exception handlers in several functions place the p parent table variable verbatim into a SQL string literal used to call the pg...
PT-2026-101926
Security vulnerability affects the wavefront-collector-for-kubernetes package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95452
Name of the Vulnerable Software and Affected Versions OpenImageIO versions prior to 3.0.20.0 OpenImageIO versions prior to 3.1.15.0 OpenImageIO versions prior to 3.2.0.3-beta1 Description A crafted Cineon file can provide a numberOfElements value exceeding the format maximum of eight. The...
PT-2026-101293
Security vulnerability affects the nginx package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101018
Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100887
Security vulnerability affects the opentelemetry-collector-contrib package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101790
Security vulnerability affects the hazelcast package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101274
Security vulnerability affects the runc package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100167
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95557
Name of the Vulnerable Software and Affected Versions Cocos AI versions prior to 0.9.0 Description Cocos AI is a confidential computing system designed for running AI workloads within trusted execution environments. The intra-handshake attested TLS aTLS AMD SEV-SNP verification path fails to...
PT-2026-95576
Name of the Vulnerable Software and Affected Versions Mnemosyne versions prior to 3.10.1 Description The sync server uses JSON Web Tokens JWT to authenticate clients. An authentication check in mnemosyne/core/sync server.py parsed the JWT header and payload using base64 decoding but used library...
PT-2026-100198
ghsa-8wc6-vgrq-x6cf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-102103
Security vulnerability affects the composer package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95358
Name of the Vulnerable Software and Affected Versions Netty affected versions not specified Description A flaw exists in the Online Certificate Status Protocol OCSP Client, which is a protocol used for obtaining the real-time revocation status of digital certificates. The client fails to verify t...
PT-2026-101729
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101483
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101305
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102029
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101701
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102028
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100600
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95711
Name of the Vulnerable Software and Affected Versions Open edX Platform versions Aspen.1 through Ulmo Open edX Platform versions Aspen.1 through Verawood.1 Description In the file openedx/core/lib/extract archive.py, the is bad path function validates safe extractall targets by comparing resolved...
PT-2026-100648
Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95504
Name of the Vulnerable Software and Affected Versions Cockpit affected versions not specified Description An integer overflow occurs in the do lastlog function during the offset calculation for lastlog entries on ILP32 Integer, Long, Pointer 32-bit builds. A low-privileged authenticated user with...
PT-2026-101741
Security vulnerability affects the activemq package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95546
Name of the Vulnerable Software and Affected Versions LubeLogger versions prior to 1.6.8 Description Authenticated non-administrative users can access the HandleTranslationFileUpload endpoint and influence the filename passed from Controllers/FilesController.cs to the RenameFile function in...
PT-2026-95494
Name of the Vulnerable Software and Affected Versions WACRM versions prior to 0.7.1 Description Account viewers can perform unauthorized actions because flow and automation write routes fail to enforce the agent role before utilizing a service-role database client that bypasses row-level security...
PT-2026-101844
Security vulnerability affects the azure-functions-node package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95661
Name of the Vulnerable Software and Affected Versions CordysCRM versions 1.7.0 through 1.7.3 Description An authenticated user with MODULE SETTING UPDATE permissions can execute arbitrary database functions via the POST /account-pool/page endpoint. This occurs because the...
PT-2026-101716
Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102039
ghsa-r28c-9q8g-f849 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100486
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100687
Security vulnerability affects the openldap package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101781
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...