398099 matches found
PT-2026-95651
Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The run maintenance function handles exceptions outside the loop that processes rows from part config. Consequently, an exception triggered by one partition set terminates the loop immediately,...
PT-2026-95444
Name of the Vulnerable Software and Affected Versions IBM Controller versions 11.0.0 through 11.0.1 FP7 IBM Controller versions 11.1.0 through 11.1.3 FP1 Description The software transmits data in clear text, which could allow an attacker to obtain sensitive information using man-in-the-middle...
PT-2026-95438
Name of the Vulnerable Software and Affected Versions IBM QRadar versions 7.5.0 through 7.5.0 UP15 Interim Fix 006 Description An authenticated user can obtain sensitive information from backup files because of incorrect permissions assignment. Recommendations Update IBM QRadar versions 7.5.0...
PT-2026-95512
Name of the Vulnerable Software and Affected Versions zot versions prior to 2.1.18 Description A flaw in the bearer authentication handler allows a remote attacker with a token limited to pull and push actions to delete manifests and blobs within the token's repository scope. This occurs because...
PT-2026-95214
Name of the Vulnerable Software and Affected Versions Freedesktop Poppler version 26.07.0 Description A remote attack can trigger an integer overflow in the JBIG2Stream::readCodeTableSeg function within the poppler/JBIG2Stream.cc file. An integer overflow occurs when an arithmetic operation resul...
PT-2026-95602
Name of the Vulnerable Software and Affected Versions OpenStack Blazar versions prior to 17.0.1 Description The V2 lease listing operation at the 'GET /v2/leases' endpoint fails to enforce project scoping or administrator-only policies. This allows any authenticated user with access to the REST A...
PT-2026-95435
Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Data version 5.1.2 Description A remote attacker can perform directory traversal on the system by sending a specially crafted URL request containing "dot dot" sequences /../. This allows the attacker to view arbitrary files o...
PT-2026-101504
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95238
Name of the Vulnerable Software and Affected Versions Easy Form Builder by WhiteStudio versions prior to 4.2.0 Description Lack of validation for submitted values against stored configurations in certain form types allows unauthenticated users to store arbitrary content. This content is...
PT-2026-95239
Name of the Vulnerable Software and Affected Versions Easy Form Builder by WhiteStudio versions prior to 4.2.0 Description Certain form types in the plugin fail to validate submitted values against the stored configuration. This flaw allows unauthenticated users to bypass registration policies an...
PT-2026-95253
Name of the Vulnerable Software and Affected Versions Bookit — Booking & Appointment Calendar WordPress plugin versions prior to 2.6.0.5 Description An issue exists where the plugin fails to perform a capability check within an appointment-deletion function. This allows users assigned to the...
PT-2026-95250
Name of the Vulnerable Software and Affected Versions iGMS Direct Booking versions prior to 2.0 Description The plugin fails to authorize or escape widget appearance settings, enabling unauthenticated users to perform a Stored Cross-Site Scripting XSS attack. This allows the storage of arbitrary...
PT-2026-95327
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-10 Synology DiskStation Manager versions prior to 7.2.2-72806-7 Synology DiskStation Manager versions prior to 7.3.2-86009-2 Description An improper certificate validation issue exists...
PT-2026-100258
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95284
Name of the Vulnerable Software and Affected Versions Printcart Web to Print Product Designer for WooCommerce versions prior to 2.8.6 Description This issue involves a Directory Traversal flaw that allows unauthenticated attackers to read arbitrary files on the server, potentially exposing...
PT-2026-95281
Name of the Vulnerable Software and Affected Versions WP Easy Pay – Payment and Donation form Builder for Square versions prior to 4.5.1 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated...
PT-2026-95330
Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description A CORS Misconfiguration exists due to improperly validated origin headers. Cross-Origin Resource Sharing CORS is a mechanism that allows restricted resources on a web pa...
PT-2026-95689
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper privilege management may allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer version that contains a fix for th...
PT-2026-95667
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper neutralization of special elements used in an OS command allows a remote attacker to execute arbitrary commands on the system. Recommendations Isolate exposed instances of IBM...
PT-2026-95289
Name of the Vulnerable Software and Affected Versions VK All in One Expansion Unit versions prior to 9.118.1 Description Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access and above to perform Stored Cross-Site Scripting. This occurs vi...
PT-2026-95344
Name of the Vulnerable Software and Affected Versions WP Recipe Maker versions prior to 10.8.2 Description Insufficient input sanitization and output escaping allow authenticated attackers with Contributor-level access and above to perform Stored Cross-Site Scripting. This is achieved by injectin...
PT-2026-95600
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server 9.0 IBM WebSphere Application Server 8.5 Description Log injection is possible through the use of crafted LTPA Lightweight Third-Party Authentication token cookies. This allows an attacker to insert malicious...
PT-2026-95310
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager DSM versions prior to 7.2.1-69057-12 Synology DiskStation Manager DSM versions prior to 7.2.2-72806-9 Synology DiskStation Manager DSM versions prior to 7.3.2-86009-4 Synology DiskStation Manager DSM versions prior...
PT-2026-95321
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-10 Synology DiskStation Manager versions prior to 7.2.2-72806-7 Synology DiskStation Manager versions prior to 7.3.2-86009-2 Description A sensitive information exposure issue exists...
PT-2026-95672
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A hardcoded credentials issue exists within the hardware assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, which may lead to...
PT-2026-95266
Name of the Vulnerable Software and Affected Versions Auto Upload Images versions prior to 3.3.3 Description This issue is a Limited Server-Side Request Forgery SSRF, a flaw that allows a server to be coerced into making requests to an unintended location. Authenticated attackers with...
PT-2026-95273
Name of the Vulnerable Software and Affected Versions GPTranslate – Multilingual AI Translation Agent for WordPress versions prior to 2.34.7 Description Sensitive information exposure occurs via the enqueue frontend scripts function. Unauthenticated attackers can extract plaintext third-party AI...
PT-2026-95663
Name of the Vulnerable Software and Affected Versions CordysCRM versions prior to 1.7.4 Description An authenticated user with CLUE MANAGEMENT POOL:READ or CUSTOMER MANAGEMENT POOL:READ permissions can access leads or accounts belonging to other users, departments, or organizations. This occurs...
PT-2026-95508
Name of the Vulnerable Software and Affected Versions spatie Scotty versions prior to 1.4.5 Description OS command injection is possible via remote attack in the Doctor Command Handler component. The issue exists within the DoctorCommand::checkSshConnectivity and DoctorCommand::checkRemoteTools...
PT-2026-95579
Name of the Vulnerable Software and Affected Versions SysReptor versions prior to 2026.58 Description Installations that enable password reset by email and configure ALLOWED HOSTS with a wildcard accept an attacker-controlled Host header during the generation of password reset links. An...
PT-2026-95577
Name of the Vulnerable Software and Affected Versions Paymenter versions prior to 1.5.7 Description A race condition exists in the service downgrade implementation within the doUpgrade function of app/Livewire/Services/Upgrade.php. The application uses Service::upgradable to check for pending...
PT-2026-101899
Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95468
Name of the Vulnerable Software and Affected Versions IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40 Description An authenticated attacker can cause a denial of service or potentially execute arbitrary code. This occurs due to a heap buffer underflow—a condition where a program writes dat...
PT-2026-102265
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102268
Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102273
Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102113
Security vulnerability affects the sqlite package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102112
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102153
Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102121
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102157
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102131
Security vulnerability affects the ruby package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102168
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102169
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102162
Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102179
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101017
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100246
Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95710
Name of the Vulnerable Software and Affected Versions Open edX Platform versions Redwood through Ulmo and Verawood.1 Description The add additional attributes to notifications function in openedx/core/djangoapps/notifications/email/utils.py assigns notification content without sanitizing...