397444 matches found
PT-2026-95586
Name of the Vulnerable Software and Affected Versions cockpit-machines affected versions not specified Description A flaw in the cockpit-machines component allows a local attacker to expose sensitive Virtual Machine VM credentials, including plaintext passwords. This occurs because the component...
PT-2026-102185
Security vulnerability affects the py3-urllib3 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95520
Name of the Vulnerable Software and Affected Versions Mongoid affected versions not specified Description An unsafe reflection weakness exists in the document persistence layer of the object-document mapping code. When an embedding application passes keys from an unauthenticated party, it can lea...
PT-2026-95316
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager DSM versions prior to 7.2.1-69057-12 Synology DiskStation Manager DSM versions prior to 7.2.2-72806-9 Synology DiskStation Manager DSM versions prior to 7.3.2-86009-4 Synology DiskStation Manager DSM versions prior...
PT-2026-100785
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101751
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101739
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100125
Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100943
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95688
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A remote authenticated attacker can execute arbitrary code because the software does not properly limit pathnames to a restricted directory. Recommendations At the moment, there is no...
PT-2026-100977
ghsa-92mm-2pjq-r785 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-95650
Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description pg partman is a PostgreSQL extension used for managing partitioned tables by time or ID. The functions drop partition id and drop partition time utilize part config.retention schema as the target...
PT-2026-95298
Name of the Vulnerable Software and Affected Versions The Newsletter – Send awesome emails from WordPress versions prior to 9.3.9 Description Reflected Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Unauthenticated attackers can inject arbitrary web script...
PT-2026-100100
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101823
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95312
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-12 Synology DiskStation Manager versions prior to 7.2.2-72806-9 Synology DiskStation Manager versions prior to 7.3.2-86009-4 Synology DiskStation Manager versions prior to 7.4-90075...
PT-2026-102166
Security vulnerability affects the openldap package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102924
Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.7.12 Description The download wheel function fails to verify the bytes of pip and setuptools seed wheels fetched during periodic updates or via the --download option against an authoritative digest, unlike the...
PT-2026-101815
Security vulnerability affects the apache-superset package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95550
Name of the Vulnerable Software and Affected Versions Kyoo versions prior to 5.1.0 Description An unauthenticated attacker can initiate an OpenID Connect OIDC login flow using a controlled redirectUrl. The system stores this URL within the login state, and the endpoint '/auth/oidc/logged/provider...
PT-2026-100511
Security vulnerability affects the runc package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95483
Name of the Vulnerable Software and Affected Versions Mealie versions prior to 3.21.0 Description Authenticated attackers can access private recipe identifiers, rating values, and favorite flags of other users across different groups or households. This occurs because the application fails to...
PT-2026-100778
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102237
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101708
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101279
Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101677
Security vulnerability affects the busybox package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101552
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100420
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100525
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100298
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95680
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper authorization in the system allows a remote authenticated attacker to bypass security restrictions due to improper access control. Recommendations At the moment, there is no...
PT-2026-101244
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101500
Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100415
Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100235
Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-99965
uri-js through 4.4.1 contains a denial of service vulnerability in the removeDotSegments function that loops infinitely when a path segment begins with Unicode line or paragraph separators. Attackers can trigger this by calling removeDotSegments directly or through normalize/resolve functions wit...
PT-2026-100490
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95285
Name of the Vulnerable Software and Affected Versions Kubio AI Page Builder versions prior to 2.8.5 Description Stored Cross-Site Scripting occurs via the kubio/copyright Block Content due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level acces...
PT-2026-100594
Security vulnerability affects the pgbouncer package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100195
Security vulnerability affects the runc package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101081
ghsa-fmxf-pm6p-7xgm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-95440
Name of the Vulnerable Software and Affected Versions IBM TS4300 versions 1.1.0.1 through 1.7.1.1 Description An authenticated user can cause a denial of service in the email service. This occurs due to improper control of interaction frequency, which allows the service to be overwhelmed...
PT-2026-95686
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A cross-site request forgery CSRF issue exists, which could allow a remote attacker to bypass security restrictions. CSRF is a type of attack that tricks a victim into submitting a maliciou...
PT-2026-102086
Security vulnerability affects the openldap package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100446
Security vulnerability affects the runc package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100376
Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95193
Name of the Vulnerable Software and Affected Versions NASA CryptoLib version 1.5.0 Description An authentication downgrade issue exists in the Telecommand TC receive path. The receiver selects the Security Association SA used for Space Data Link Security SDLS processing based only on the SPI fiel...