398914 matches found
PT-2026-100240
Security vulnerability affects the dnsmasq package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101866
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101868
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100804
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101027
Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100783
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102290
Summary In affected versions, the URL of a remote MCP server is attacker-controlled at registration and is fetched server-side with no validation of the destination. There is no guard against loopback, link-local, RFC1918 private ranges, or the cloud metadata endpoint 169.254.169.254, so a use wi...
PT-2026-95282
Name of the Vulnerable Software and Affected Versions Mapster WP Maps versions prior to 1.23.1 Description The plugin contains an Arbitrary User Meta Write flaw within the my profile update function. The issue occurs because the function fails to perform nonce verification, capability checks, and...
PT-2026-100061
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95621
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description An unauthenticated second-order SQL injection exists in the generateInsertQuery functionality of change-tracker-data.sql. A remote attacker can inject malicious SQL that the application lat...
PT-2026-100318
Security vulnerability affects the kibana package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95650
Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description pg partman is a PostgreSQL extension used for managing partitioned tables by time or ID. The functions drop partition id and drop partition time utilize part config.retention schema as the target...
PT-2026-95321
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-10 Synology DiskStation Manager versions prior to 7.2.2-72806-7 Synology DiskStation Manager versions prior to 7.3.2-86009-2 Description A sensitive information exposure issue exists...
PT-2026-102153
Security vulnerability affects the nats-server-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95579
Name of the Vulnerable Software and Affected Versions SysReptor versions prior to 2026.58 Description Installations that enable password reset by email and configure ALLOWED HOSTS with a wildcard accept an attacker-controlled Host header during the generation of password reset links. An...
PT-2026-95238
Name of the Vulnerable Software and Affected Versions Easy Form Builder by WhiteStudio versions prior to 4.2.0 Description Lack of validation for submitted values against stored configurations in certain form types allows unauthenticated users to store arbitrary content. This content is...
PT-2026-95444
Name of the Vulnerable Software and Affected Versions IBM Controller versions 11.0.0 through 11.0.1 FP7 IBM Controller versions 11.1.0 through 11.1.3 FP1 Description The software transmits data in clear text, which could allow an attacker to obtain sensitive information using man-in-the-middle...
PT-2026-102179
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95330
Name of the Vulnerable Software and Affected Versions HCL BigFix Service Management affected versions not specified Description A CORS Misconfiguration exists due to improperly validated origin headers. Cross-Origin Resource Sharing CORS is a mechanism that allows restricted resources on a web pa...
PT-2026-95273
Name of the Vulnerable Software and Affected Versions GPTranslate – Multilingual AI Translation Agent for WordPress versions prior to 2.34.7 Description Sensitive information exposure occurs via the enqueue frontend scripts function. Unauthenticated attackers can extract plaintext third-party AI...
PT-2026-95284
Name of the Vulnerable Software and Affected Versions Printcart Web to Print Product Designer for WooCommerce versions prior to 2.8.6 Description This issue involves a Directory Traversal flaw that allows unauthenticated attackers to read arbitrary files on the server, potentially exposing...
PT-2026-95689
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper privilege management may allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer version that contains a fix for th...
PT-2026-95667
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper neutralization of special elements used in an OS command allows a remote attacker to execute arbitrary commands on the system. Recommendations Isolate exposed instances of IBM...
PT-2026-95602
Name of the Vulnerable Software and Affected Versions OpenStack Blazar versions prior to 17.0.1 Description The V2 lease listing operation at the 'GET /v2/leases' endpoint fails to enforce project scoping or administrator-only policies. This allows any authenticated user with access to the REST A...
PT-2026-95250
Name of the Vulnerable Software and Affected Versions iGMS Direct Booking versions prior to 2.0 Description The plugin fails to authorize or escape widget appearance settings, enabling unauthenticated users to perform a Stored Cross-Site Scripting XSS attack. This allows the storage of arbitrary...
PT-2026-95508
Name of the Vulnerable Software and Affected Versions spatie Scotty versions prior to 1.4.5 Description OS command injection is possible via remote attack in the Doctor Command Handler component. The issue exists within the DoctorCommand::checkSshConnectivity and DoctorCommand::checkRemoteTools...
PT-2026-102169
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95710
Name of the Vulnerable Software and Affected Versions Open edX Platform versions Redwood through Ulmo and Verawood.1 Description The add additional attributes to notifications function in openedx/core/djangoapps/notifications/email/utils.py assigns notification content without sanitizing...
PT-2026-100193
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95668
Name of the Vulnerable Software and Affected Versions IBM Guardium Data Protection version 12.2 Description Improper privilege management allows a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
PT-2026-102234
Security vulnerability affects the tensorflow-gpu-jupyter package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102112
Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100509
Security vulnerability affects the forecastle package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100350
Security vulnerability affects the jitsucom-jitsu package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101796
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102251
Security vulnerability affects the thingsboard package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95456
Bransys ELD is shipped with hardcoded MQTT credentials, which will grant read access to real-time data for every active device across a subset of carriers that were connected to the affected MQTT broker...
PT-2026-101801
Security vulnerability affects the n8n package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101970
Security vulnerability affects the akhq package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101784
Security vulnerability affects the sqlpad package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101920
Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102049
Security vulnerability affects the azure-functions-node package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102043
Security vulnerability affects the jupyterhub-k8s-hub package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100866
Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101244
Security vulnerability affects the curl package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-102162
Security vulnerability affects the redis package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100235
Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-101935
Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details...