398914 matches found
PT-2026-95318
Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description A security misconfiguration involving improper access controls allows an authenticated attacker to view restricted data elements across tenant boundaries. This issue...
PT-2026-95417
Name of the Vulnerable Software and Affected Versions JBoss Enterprise Application Platform affected versions not specified Description A flaw exists in the Elytron component of EAP. When an application security domain is backed by an Elytron token-realm using oauth2-introspection, the system...
PT-2026-101502
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95438
Name of the Vulnerable Software and Affected Versions IBM QRadar versions 7.5.0 through 7.5.0 UP15 Interim Fix 006 Description An authenticated user can obtain sensitive information from backup files because of incorrect permissions assignment. Recommendations Update IBM QRadar versions 7.5.0...
PT-2026-95512
Name of the Vulnerable Software and Affected Versions zot versions prior to 2.1.18 Description A flaw in the bearer authentication handler allows a remote attacker with a token limited to pull and push actions to delete manifests and blobs within the token's repository scope. This occurs because...
PT-2026-95281
Name of the Vulnerable Software and Affected Versions WP Easy Pay – Payment and Donation form Builder for Square versions prior to 4.5.1 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated...
PT-2026-95600
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server 9.0 IBM WebSphere Application Server 8.5 Description Log injection is possible through the use of crafted LTPA Lightweight Third-Party Authentication token cookies. This allows an attacker to insert malicious...
PT-2026-95266
Name of the Vulnerable Software and Affected Versions Auto Upload Images versions prior to 3.3.3 Description This issue is a Limited Server-Side Request Forgery SSRF, a flaw that allows a server to be coerced into making requests to an unintended location. Authenticated attackers with...
PT-2026-102268
Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102157
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100288
Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100293
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100308
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100085
Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100083
Security vulnerability affects the hazelcast package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100144
Security vulnerability affects the langfuse-worker package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100154
Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100133
Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100257
Security vulnerability affects the wildfly package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-99986
Security vulnerability affects the elastic-beats-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95718
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The application uses a calculator-style vault passcode to protect access, but the stored data is not bound to this authentication boundary. A local actor with...
PT-2026-102716
Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parse auth header function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with calloc0, len when an HTTP Basic Authorization value exceeds its fixed work buffer, then passe...
PT-2026-102216
Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101893
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102054
Security vulnerability affects the coredns package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101969
Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101972
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101785
Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95696
The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-Box plugins for WordPress are vulnerable to Arbitrary File Upload in all versions from 2.0 up to, and including, 3.8.3 via the download file to uploads function. This is due to the import action being registered for...
PT-2026-101254
Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101287
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101714
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101735
Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101707
Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101109
Security vulnerability affects the expat package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101102
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101077
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101111
Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101112
Security vulnerability affects the airflow-3 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101169
Security vulnerability affects the forecastle package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101217
Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101206
Security vulnerability affects the argo-workflows-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101203
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101029
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101014
Security vulnerability affects the argo-workflows-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101037
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100768
Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100787
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...