11645 matches found
TencentOS Server 4: vim (TSSA-2026:0880)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0880 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
TencentOS Server 4: rsync (TSSA-2026:0874)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0874 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state
A flaw was found in glibc. Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding for example with iconv can cause the converter to make no progress, hanging the calling application. Some EUCJISX0213 sequences decode to two code points; if the output buffer has room...
glibc: Non-progress DoS in SHIFT_JISX0213 ->
A flaw was found in glibc. A remote attacker could exploit this vulnerability by providing specially crafted input during SHIFTJISX0213 to UCS-4 text conversion. This crafted input can cause the application to repeatedly emit a buffered code point without consuming further input, leading to...
CLSA-2026-1788171127 TuxCare security update for django (4 CVEs)
TuxCare rebuilt django to address 4 CVEs. Fixed in 5.1.4.post4+tuxcare...
CVE-2026-82724
Incorrect Authorization vulnerability in ash-project ashphoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.onmount/4 attached a handleparams hook to assign the...
PT-2026-89666
TuxCare rebuilt org.springframework.data:spring-data-keyvalue to address 4 CVEs. Fixed in 3.3.13-tuxcare.3...
Spring Office Hours Podcast: S5E21 - Pro Spring Boot 4 with Felipe Gutierrez
Join Dan Vega and DaShaun Carter for the latest updates from the Spring Ecosystem. In this episode, Dan and DaShaun are joined by returning guest Felipe Gutierrez, co-author with DaShaun of the new book "Pro Spring Boot 4: An Authoritative Guide with Best Practices" from Apress. Felipe and DaShau...
CVE-2026-82724: Incorrect Authorization
Incorrect Authorization vulnerability in ash-project ashphoenix invokes the SubdomainHook authorization callback with a nil tenant, so tenant-scoped access checks never see the tenant they are meant to enforce. AshPhoenix.LiveView.SubdomainHook.onmount/4 attached a handleparams hook to assign the...
CVE-2026-78228
Uncontrolled Recursion vulnerability in ash-project ashoban allows a user who can drive a trigger's onerror action to fail on the final attempt to exhaust worker CPU and memory, denying service. The generated worker's atomic handleerror/4 runs the trigger's onerror action on a job's final attempt...
CVE-2026-75759
Improper Verification of Cryptographic Signature vulnerability in erlef oidcc allows an unauthenticated attacker to impersonate an arbitrary user via an encrypted ID token or JARM response carrying no nested signature. OpenID Connect Core 1.0 section 2 requires that an encrypted ID token be signe...
CVE-2026-78228: Uncontrolled Recursion
Uncontrolled Recursion vulnerability in ash-project ashoban allows a user who can drive a trigger's onerror action to fail on the final attempt to exhaust worker CPU and memory, denying service. The generated worker's atomic handleerror/4 runs the trigger's onerror action on a job's final attempt...
CVE-2026-82417: Uncaught Exception
Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. utils.isBuffer duck-types buffers by calling obj.constructor.isBufferobj after checking only that the property is truthy, so a value such as constructor:...
CLSA-2026-1787867443 TuxCare security update for 206 packages (4 CVEs)
TuxCare rebuilt 206 packages to address 4 CVEs. Fixed in 3.5.9-tuxcare.7...
CVE-2026-80489
A flaw was found in glibc. Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding for example with iconv can cause the converter to make no progress, hanging the calling application. Some EUCJISX0213 sequences decode to two code points; if the output buffer has room...
PT-2026-86588
TuxCare rebuilt 206 packages to address 4 CVEs. Fixed in 3.5.9-tuxcare.7...
Linux Distros Unpatched Vulnerability : CVE-2026-80489
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may resu...
Exploit for Code Injection in Pgadmin Pgadmin_4
CVE-2025-2945 — pgAdmin 4 Authenticated Query Tool RCE CVSS...
CVE-2026-58089
When a process calls execve2 to execute a setuid or setgid image, hwpmc4 is supposed to detach PMCs owned by unprivileged processes. An inverted check meant that this scenario was not handled properly. An unprivileged local user who has attached PMCs to a process can continue monitoring it after...
RHCOS 4 : OpenShift Container Platform 4.19.44 (RHSA-2026:57401)
The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57401 advisory. - net/mail: golang: Go net/mail: Denial of Service via crafted email inputs CVE-2026-39820 Note that Nessus has not tested for this issue bu...