397710 matches found
PT-2026-100509
Security vulnerability affects the forecastle package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100351
Security vulnerability affects the keycloak package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100358
Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100350
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100363
Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100334
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100357
Security vulnerability affects the tigera-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100332
Security vulnerability affects the wildfly package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95621
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An unauthenticated second-order SQL injection exists in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker can inject malicious SQL that the application lat...
PT-2026-95507
Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an information disclosure vulnerability that allows unauthenticated remote attackers to obtain sensitive system information by querying the SNMP v2c service configured with the default community string 'public'. Attackers can query...
PT-2026-99972
rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bit string flags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so raw bits.len - 1 underflows o...
PT-2026-99976
rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bit string flags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so raw bits.len - 1 underflows o...
PT-2026-99970
rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bit string flags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so raw bits.len - 1 underflows o...
PT-2026-100762
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100345
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95479
Name of the Vulnerable Software and Affected Versions CareCam CM2507 affected versions not specified Description An insufficiently protected network maintenance mechanism allows for the activation of a remote debugging service. An attacker located on the same local network who meets specific devi...
PT-2026-99969
rustls-webpki rustls/webpki versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issu...
PT-2026-99982
rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints. Attackers with a compromised trusted issuing authority can...
PT-2026-95460
Name of the Vulnerable Software and Affected Versions gedelumbung HospitalManagement versions up to c2d45543789a3887067d3915f69d44cfc2cf76a8 Description Improper authentication occurs in the Password Change Handler component due to the manipulation of the kode user or username arguments. This iss...
PT-2026-101577
ghsa-qppj-fm5r-hxr3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-102100
ghsa-f23m-r3pf-42rh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101725
Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100546
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101645
ghsa-7g45-4rm6-3mm3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-99834
TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 1.11.0-tuxcare.1...
PT-2026-101104
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102275
Security vulnerability affects the tigera-operator package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100704
ghsa-h5fg-jpgr-rv9c affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-102155
ghsa-6475-r3vj-m8vf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100590
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100926
ghsa-qjvc-p88j-j9rm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100059
Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100196
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100772
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101936
Security vulnerability affects the spark-sc213-jdk17-py312 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101496
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100641
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101745
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95558
Name of the Vulnerable Software and Affected Versions Mongoid affected versions not specified Description The query builder fails to neutralize string-typed query criteria, passing them directly to the database as server-side JavaScript expressions. An unauthenticated party capable of influencing...
PT-2026-100631
Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102008
Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100588
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101987
Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102174
Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102160
Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100061
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95448
IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0.1, and ART 9.0.0.2 generates an error message that includes sensitive information about its environment, users, or associated data...
PT-2026-95599
Hongjing e-HR before 8.2 contains a SQL injection vulnerability in the /servlet/codesettree endpoint where the categories query parameter is passed to a database query without sanitization after HRMS-encoding is stripped. An unauthenticated remote attacker can supply a crafted UNION SELECT payloa...