398913 matches found
PT-2026-101544
Security vulnerability affects the kafka-ui package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100506
ghsa-8qq5-rm4j-mr97 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100709
ghsa-vffw-93wf-4j4q affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100603
Security vulnerability affects the cassandra-reaper-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95687
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper neutralization of special elements used in an OS command allows a remote attacker to execute arbitrary OS commands. Recommendations At the moment, there is no information about a...
PT-2026-101919
Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95548
Name of the Vulnerable Software and Affected Versions AnyIO versions prior to 4.14.2 Description AnyIO starts process-pool workers with the standard error stream connected to a pipe that the parent process never drains. Although documentation states all three standard streams are redirected, the...
PT-2026-95285
Name of the Vulnerable Software and Affected Versions Kubio AI Page Builder versions prior to 2.8.5 Description Stored Cross-Site Scripting occurs via the kubio/copyright Block Content due to insufficient input sanitization and output escaping. Authenticated attackers with contributor-level acces...
PT-2026-102218
ghsa-jhf3-xxhw-2wpp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100161
ghsa-jmp9-x22r-554x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100754
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101492
Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100445
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95307
Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 3.3.2 Description The asset queued-events DELETE endpoints incorrectly verify the caller's Dag-axis permission using READ instead of EDIT. This allows any authenticated user with read access to a Dag to delete...
PT-2026-95396
Name of the Vulnerable Software and Affected Versions Imager for Perl versions prior to 1.036 Description Processing a TGA file with a colour map length of 32768 or more triggers an uncatchable process exit when using the Imager-read function. This occurs because the reader unpacks the two-byte...
PT-2026-95317
Name of the Vulnerable Software and Affected Versions HCLSoftware AppScan 360° affected versions not specified Description A Path Traversal issue exists in the ASReportService component. This occurs due to improper handling of file paths, which allows an authenticated attacker to read or write...
PT-2026-95318
Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description A security misconfiguration involving improper access controls allows an authenticated attacker to view restricted data elements across tenant boundaries. This issue...
PT-2026-95417
Name of the Vulnerable Software and Affected Versions JBoss Enterprise Application Platform affected versions not specified Description A flaw exists in the Elytron component of EAP. When an application security domain is backed by an Elytron token-realm using oauth2-introspection, the system...
PT-2026-101502
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95438
Name of the Vulnerable Software and Affected Versions IBM QRadar versions 7.5.0 through 7.5.0 UP15 Interim Fix 006 Description An authenticated user can obtain sensitive information from backup files because of incorrect permissions assignment. Recommendations Update IBM QRadar versions 7.5.0...
PT-2026-95512
Name of the Vulnerable Software and Affected Versions zot versions prior to 2.1.18 Description A flaw in the bearer authentication handler allows a remote attacker with a token limited to pull and push actions to delete manifests and blobs within the token's repository scope. This occurs because...
PT-2026-95281
Name of the Vulnerable Software and Affected Versions WP Easy Pay – Payment and Donation form Builder for Square versions prior to 4.5.1 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated...
PT-2026-95600
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server 9.0 IBM WebSphere Application Server 8.5 Description Log injection is possible through the use of crafted LTPA Lightweight Third-Party Authentication token cookies. This allows an attacker to insert malicious...
PT-2026-95266
Name of the Vulnerable Software and Affected Versions Auto Upload Images versions prior to 3.3.3 Description This issue is a Limited Server-Side Request Forgery SSRF, a flaw that allows a server to be coerced into making requests to an unintended location. Authenticated attackers with...
PT-2026-102268
Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102157
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100288
Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100293
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100308
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100272
Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100074
Security vulnerability affects the apache-superset package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100085
Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100083
Security vulnerability affects the hazelcast package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100144
Security vulnerability affects the langfuse-worker package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100154
Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100133
Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100257
Security vulnerability affects the wildfly package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-99986
Security vulnerability affects the elastic-beats-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95291
Name of the Vulnerable Software and Affected Versions WCFM Marketplace versions prior to 3.8.2 Description The WCFM Marketplace plugin for WordPress is subject to SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution. This occurs because the...
PT-2026-95718
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The application uses a calculator-style vault passcode to protect access, but the stored data is not bound to this authentication boundary. A local actor with...
PT-2026-102716
Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parse auth header function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with calloc0, len when an HTTP Basic Authorization value exceeds its fixed work buffer, then passe...
PT-2026-102216
Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101893
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102054
Security vulnerability affects the coredns package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101969
Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101972
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101785
Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95696
The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable to Arbitrary File Upload in all versions from 2.0 up to, and including, 3.8.3 via the download file to uploads function. This is due to the import action being registered for...