398142 matches found
PT-2026-95593
Name of the Vulnerable Software and Affected Versions deepmerge versions prior to 4.3.2 Description The mergeObject function fails to properly validate keys written to target objects, leading to prototype poisoning. This occurs when a crafted source object containing keys such as proto ,...
PT-2026-95321
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-10 Synology DiskStation Manager versions prior to 7.2.2-72806-7 Synology DiskStation Manager versions prior to 7.3.2-86009-2 Description A sensitive information exposure issue exists...
PT-2026-102153
Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95579
Name of the Vulnerable Software and Affected Versions SysReptor versions prior to 2026.58 Description Installations that enable password reset by email and configure ALLOWED HOSTS with a wildcard accept an attacker-controlled Host header during the generation of password reset links. An...
PT-2026-95468
Name of the Vulnerable Software and Affected Versions IBM MQ for HPE NonStop versions 8.1.0 through 8.1.0.40 Description An authenticated attacker can cause a denial of service or potentially execute arbitrary code. This occurs due to a heap buffer underflow—a condition where a program writes dat...
PT-2026-95238
Name of the Vulnerable Software and Affected Versions Easy Form Builder by WhiteStudio versions prior to 4.2.0 Description Lack of validation for submitted values against stored configurations in certain form types allows unauthenticated users to store arbitrary content. This content is...
PT-2026-95444
Name of the Vulnerable Software and Affected Versions IBM Controller versions 11.0.0 through 11.0.1 FP7 IBM Controller versions 11.1.0 through 11.1.3 FP1 Description The software transmits data in clear text, which could allow an attacker to obtain sensitive information using man-in-the-middle...
PT-2026-102179
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95289
Name of the Vulnerable Software and Affected Versions VK All in One Expansion Unit versions prior to 9.118.1 Description Insufficient input sanitization and output escaping allow authenticated attackers with contributor-level access and above to perform Stored Cross-Site Scripting. This occurs vi...
PT-2026-95330
Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description A CORS Misconfiguration exists due to improperly validated origin headers. Cross-Origin Resource Sharing CORS is a mechanism that allows restricted resources on a web pa...
PT-2026-95273
Name of the Vulnerable Software and Affected Versions GPTranslate – Multilingual AI Translation Agent for WordPress versions prior to 2.34.7 Description Sensitive information exposure occurs via the enqueue frontend scripts function. Unauthenticated attackers can extract plaintext third-party AI...
PT-2026-95284
Name of the Vulnerable Software and Affected Versions Printcart Web to Print Product Designer for WooCommerce versions prior to 2.8.6 Description This issue involves a Directory Traversal flaw that allows unauthenticated attackers to read arbitrary files on the server, potentially exposing...
PT-2026-95672
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A hardcoded credentials issue exists within the hardware assess/obstore binaries. A low-privileged authenticated user can recover hardcoded product master secrets, which may lead to...
PT-2026-95689
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper privilege management may allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer version that contains a fix for th...
PT-2026-95667
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper neutralization of special elements used in an OS command allows a remote attacker to execute arbitrary commands on the system. Recommendations Isolate exposed instances of IBM...
PT-2026-95310
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager DSM versions prior to 7.2.1-69057-12 Synology DiskStation Manager DSM versions prior to 7.2.2-72806-9 Synology DiskStation Manager DSM versions prior to 7.3.2-86009-4 Synology DiskStation Manager DSM versions prior...
PT-2026-95602
Name of the Vulnerable Software and Affected Versions OpenStack Blazar versions prior to 17.0.1 Description The V2 lease listing operation at the 'GET /v2/leases' endpoint fails to enforce project scoping or administrator-only policies. This allows any authenticated user with access to the REST A...
PT-2026-95250
Name of the Vulnerable Software and Affected Versions iGMS Direct Booking versions prior to 2.0 Description The plugin fails to authorize or escape widget appearance settings, enabling unauthenticated users to perform a Stored Cross-Site Scripting XSS attack. This allows the storage of arbitrary...
PT-2026-95508
Name of the Vulnerable Software and Affected Versions spatie Scotty versions prior to 1.4.5 Description OS command injection is possible via remote attack in the Doctor Command Handler component. The issue exists within the DoctorCommand::checkSshConnectivity and DoctorCommand::checkRemoteTools...
PT-2026-102169
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95710
Name of the Vulnerable Software and Affected Versions Open edX Platform versions Redwood through Ulmo and Verawood.1 Description The add additional attributes to notifications function in openedx/core/djangoapps/notifications/email/utils.py assigns notification content without sanitizing...
PT-2026-95679
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...
PT-2026-100193
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95668
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper privilege management allows a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
PT-2026-102234
Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101097
Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102112
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100509
Security vulnerability affects the forecastle package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101497
Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100350
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101796
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101925
Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102251
Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95350
Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description An Administrative Session Concurrency issue exists where the application permits multiple simultaneous authenticated sessions for a single administrative account. This...
PT-2026-95456
Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...
PT-2026-102074
Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101801
Security vulnerability affects the n8n package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101970
Security vulnerability affects the akhq package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101784
Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101945
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101920
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102226
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102049
Security vulnerability affects the azure-functions-node package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102043
Security vulnerability affects the jupyterhub-k8s-hub package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100866
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95635
Name of the Vulnerable Software and Affected Versions cockpit-files affected versions not specified Description A timing issue, known as a symlink race condition, exists during privileged file operations such as changing file ownership or permissions. A local attacker can manipulate directory...
PT-2026-101244
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101704
Security vulnerability affects the kumactl package. This issue is resolved in later releases. See references for vulnerability details...