425866 matches found
PT-2026-117639
Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to arbitrary code execution...
PT-2026-117372
A flaw was found in the rhc-canonical-facts.service systemd unit shipped with rhc. The service runs as root and operates on a file inside a directory owned by an unprivileged system user without verifying that the file is not a symbolic link. A local attacker who has already compromised the...
PT-2026-117497
Name of the Vulnerable Software and Affected Versions russh versions prior to 0.64.1 Description The agent server in the library contains a flaw where it spawns a separate long-lived task for every SSH AGENT CONSTRAIN LIFETIME record received in a constrained add-key request. The add key function...
PT-2026-117290
Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-house kylin deployments are mostly not impacted. This issue affects Apache Kylin: fro...
PT-2026-117412
sglang-router sgl-model-gateway through 0.3.2 contains an authorization bypass vulnerability that allows holders of the data-plane API key to access mesh HA management routes because /ha/ endpoints skip control-plane Admin role checks. Attackers can read cluster topology, write gossiped...
PT-2026-117338
Name of the Vulnerable Software and Affected Versions Apache Camel versions 4.11.0 through 4.18.4 Apache Camel versions 4.19.0 through 4.22.0 Description An improper authentication issue exists in the Apache Camel OAuth component. The camel-oauth processors designed to guard routes fail to stop t...
PT-2026-117354
Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from 4.19.0 before 4.22.1. When a route behind a CXF SOAP consumer failed with an exception the service contract does not declare, t...
PT-2026-131165
TuxCare rebuilt @angular/platform-server to address 3 CVEs. Fixed in 9.1.13-tuxcare.15...
PT-2026-117366
FopProducer transforms the incoming XSL-FO message body by creating a javax.xml.transform.TransformerFactory through TransformerFactory.newInstance and enabling only FEATURE SECURE PROCESSING before running an identity transform over the body. On the JDK's built-in transformer, that feature alone...
PT-2026-117566
A heap use-after-free in the gf odf ac4 cfg clean list function /odf/descriptors.c of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
PT-2026-131472
TuxCare rebuilt @angular/platform-browser-dynamic to address 3 CVEs. Fixed in 13.3.12-tuxcare.6...
PT-2026-131444
TuxCare rebuilt @angular/platform-browser-dynamic to address 2 CVEs. Fixed in 14.2.12-tuxcare.3...
PT-2026-131086
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 12.0.0-tuxcare.2...
PT-2026-130761
TuxCare rebuilt @angular/platform-browser to address 17 CVEs. Fixed in 18.1.2-tuxcare.2...
PT-2026-131233
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 7.2.11-tuxcare.6...
PT-2026-131847
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 17.1.0-tuxcare.8...
PT-2026-131977
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 15.0.3-tuxcare.3...
PT-2026-130723
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 16.2.12-tuxcare.8...
PT-2026-118003
Mercury runs a JupyterLab server with anonymous access by default mercury app/ main .py sets --IdentityProvider.token='' when no --token/MERCURY TOKEN is given; when tokenless it also sets --ServerApp.disable check xsrf=True. It relies on a blocklist mercury app/block handler.py BLOCKED PATTERNS:...
PT-2026-132048
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 3 CVEs. Fixed in 2.15.4-tuxcare.1...
PT-2026-131057
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 13.4.0-tuxcare.4...
PT-2026-120478
Name of the Vulnerable Software and Affected Versions Elementor Website Builder WordPress plugin versions prior to 4.3.5 Description Insufficient sanitization of uploaded SVG files across upload routes allows users with the Author role or higher to upload files containing JavaScript. This leads t...
PT-2026-117450
A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4. Affected by this vulnerability is an unknown functionality of the file home.php of the component Submission Form. This manipulation of the argument...
PT-2026-131302
TuxCare rebuilt @angular/platform-server to address 1 CVE. Fixed in 7.2.16-tuxcare.6...
PT-2026-131950
TuxCare rebuilt @angular/service-worker to address 1 CVE. Fixed in 12.2.17-tuxcare.8...
PT-2026-130771
TuxCare rebuilt @angular/platform-browser to address 16 CVEs. Fixed in 14.2.12-tuxcare.2...
PT-2026-130752
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 11.2.11-tuxcare.2...
PT-2026-132014
TuxCare rebuilt @babel/helper-builder-react-jsx to address 1 CVE. Fixed in 7.29.0-tuxcare.1...
PT-2026-132015
TuxCare rebuilt @babel/helper-builder-react-jsx to address 1 CVE. Fixed in 7.12.18-tuxcare.2...
PT-2026-130899
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 14.2.8-tuxcare.7...
PT-2026-130934
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 14.3.0-tuxcare.5...
PT-2026-131366
TuxCare rebuilt @storybook/addon-controls to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
PT-2026-130406
TuxCare rebuilt @angular/localize to address 4 CVEs. Fixed in 17.1.0-tuxcare.4...
PT-2026-117241
Name of the Vulnerable Software and Affected Versions BDM Digital Payment Gateway WordPress plugin versions prior to 1.3.13 Description The plugin fails to verify credentials on its public payment-status update route and treats unset credentials as valid. This allows unauthenticated attackers to...
PT-2026-131608
TuxCare rebuilt @angular/platform-browser-dynamic to address 1 CVE. Fixed in 13.4.0-tuxcare.2...
PT-2026-130996
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 8.2.14-tuxcare.8...
PT-2026-117310
Insertion of Sensitive Information into Log File vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. Full API keys are written to application logs on every authenticated request, allowing anyone with log-read access to recover and replay active bearer credentials. Use...
PT-2026-130373
TuxCare rebuilt @angular/localize to address 15 CVEs. Fixed in 15.2.2-tuxcare.2...
PT-2026-130494
TuxCare rebuilt @angular/localize to address 1 CVE. Fixed in 13.4.0-tuxcare.3...
PT-2026-130995
TuxCare rebuilt @angular/platform-browser to address 1 CVE. Fixed in 12.0.0-tuxcare.1...
PT-2026-118015
Coraza JSON body processor: argument-limit truncation reopens an unbounded-depth gjson.Valid stack overflow process crash in github.com/corazawaf/coraza...
PT-2026-117655
Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description A flaw exists in the Python imaging library where the ImageMorph.MorphOp.apply function can access memory before a row buffer when processing images with a width of zero. This occurs because the PPM...
PT-2026-117672
Name of the Vulnerable Software and Affected Versions Pillow versions 5.1.0 through 12.1.0 Description A flaw exists where the library can enter an infinite loop during the rewriting of PDF pages. This occurs because the PdfParser.rewrite pages function follows parent relationships without...
PT-2026-117677
Name of the Vulnerable Software and Affected Versions Pillow versions 5.1.0 through 12.9.9 Description Pillow can exhaust system resources when parsing an existing PDF during an append operation. The PdfParser follows page-tree child references without tracking cycles or duplications and follows...
PT-2026-117656
Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description The FlashPix JPEG-tile decoder in the Pillow imaging library contains a flaw where decoded scanlines can be written beyond the allocated tile buffer. This occurs because FlashPix FPX JPEG decoding...
PT-2026-132507
debian/rules: disable the build-time test suite on armel, which is built under emulation and too slow to run it...
PT-2026-117660
Name of the Vulnerable Software and Affected Versions Pillow versions prior to 13.0.0 Description A double free of image memory can occur when the ImagingScaleAffine function encounters a selective allocation failure. This happens during the fast path processing of Transform.EXTENT or pure...
PT-2026-132531
TuxCare rebuilt @babel/plugin-transform-react-jsx-self to address 1 CVE. Fixed in 7.21.5-tuxcare.1...