398914 matches found
PT-2026-100125
Security vulnerability affects the logstash-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95688
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A remote authenticated attacker can execute arbitrary code because the software does not properly limit pathnames to a restricted directory. Recommendations At the moment, there is no...
PT-2026-100977
ghsa-92mm-2pjq-r785 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-100762
Security vulnerability affects the openssl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101928
Security vulnerability affects the nodejs package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101474
Security vulnerability affects the grafana-alloy package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102069
ghsa-5x3r-wrvg-rp6q affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-99969
rustls-webpki rustls/webpki versions 0.101.0 through 0.103.11 and 0.104.0-alpha releases before 0.104.0-alpha.6 ignore X.509 name constraints that apply to URI names, causing such constraints to be accepted rather than enforced. Because name constraints are restrictions on otherwise properly issu...
PT-2026-99970
rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bit string flags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so raw bits.len - 1 underflows o...
PT-2026-99972
rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bit string flags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so raw bits.len - 1 underflows o...
PT-2026-99976
rustls-webpki through 0.103.12 and 0.104.0-alpha releases before 0.104.0-alpha.7 contains a reachable panic in bit string flags in src/der.rs. The input guard fails to reject a named-bit BIT STRING whose content is exactly 0x00 zero padding bits and no data bytes, so raw bits.len - 1 underflows o...
PT-2026-99982
rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDistributionPoint, ignoring additional distributionPoints. Attackers with a compromised trusted issuing authority can...
PT-2026-95311
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager DSM versions prior to 7.2.1-69057-12 Synology DiskStation Manager DSM versions prior to 7.2.2-72806-9 Synology DiskStation Manager DSM versions prior to 7.3.2-86009-4 Synology DiskStation Manager DSM versions prior...
PT-2026-100685
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100572
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100846
Security vulnerability affects the airflow-2 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95515
Name of the Vulnerable Software and Affected Versions Semantic MediaWiki versions prior to 7.2.0 Description Semantic MediaWiki is an open-source extension for MediaWiki used to store and query data. The software fails to sanitize the sep variable when it is inserted into the HTML that joins tabl...
PT-2026-100088
Security vulnerability affects the spark-sc213-jdk17-py312 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100926
ghsa-qjvc-p88j-j9rm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-102924
Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.7.12 Description The download wheel function fails to verify the bytes of pip and setuptools seed wheels fetched during periodic updates or via the --download option against an authoritative digest, unlike the...
PT-2026-95342
Name of the Vulnerable Software and Affected Versions Quarkus affected versions not specified Description An issue exists in Quarkus HTTP security where a discrepancy in path normalization between the security matcher and HTTP request dispatchers can be exploited. An unauthenticated attacker can...
PT-2026-102226
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100438
Security vulnerability affects the perl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95680
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper authorization in the system allows a remote authenticated attacker to bypass security restrictions due to improper access control. Recommendations At the moment, there is no...
PT-2026-95686
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description A cross-site request forgery CSRF issue exists, which could allow a remote attacker to bypass security restrictions. CSRF is a type of attack that tricks a victim into submitting a maliciou...
PT-2026-95679
IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass security restrictions due to missing authentication for the ChangeTrackerServlet...
PT-2026-95623
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper validation of user supplied input allows an authenticated user to execute arbitrary commands with low user privileges on the system. Recommendations At the moment, there is no...
PT-2026-95673
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper authorization allows a remote authenticated attacker to bypass security restrictions. Recommendations Restrict access to the system as a temporary mitigation measure. At the moment...
PT-2026-95678
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of input during web page generation...
PT-2026-102245
Security vulnerability affects the cluster-proportional-autoscaler package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102187
Security vulnerability affects the cluster-proportional-autoscaler package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100294
ghsa-65pc-fj4g-8rjx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-95544
Name of the Vulnerable Software and Affected Versions LMDeploy versions 0.9.2 through 0.15.9 Description LMDeploy's PyTorch DistServe/PD-disaggregation control plane uses the recv pyobj function to deserialize messages received through a ZeroMQ PULL socket. This function relies on Python pickle...
PT-2026-101721
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95578
Name of the Vulnerable Software and Affected Versions SysReptor versions prior to 2026.55 Description An unauthenticated user with a public note share link can access project-wide collaborative editing metadata. This occurs because the public share consumer joins the same collaboration group as...
PT-2026-95606
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 Description Missing authorization checks in the administrative console may allow a remote attacker to obtain sensitive information. Recommendations At the moment, there is no information...
PT-2026-95306
Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description Cross-Site Scripting XSS allows an attacker to inject unsanitized malicious scripts that execute in a victim's browser. This can lead to session hijacking, account...
PT-2026-100711
ghsa-f2g3-hh2r-cwgc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101190
ghsa-rpmf-866q-6p89 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-101035
Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95327
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-10 Synology DiskStation Manager versions prior to 7.2.2-72806-7 Synology DiskStation Manager versions prior to 7.3.2-86009-2 Description An improper certificate validation issue exists...
PT-2026-100658
Security vulnerability affects the trino package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101138
Security vulnerability affects the keycloak package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102265
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100759
Security vulnerability affects the nginx package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100240
Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101866
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101868
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...