490250 matches found
Security update for tomcat11
This update for tomcat11 fixes the following issues: CVE-2026-65182: Apache Tomcat: Bypass longest prefix security constraint bsc1276893. CVE-2026-65183: Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets bsc1276894. CVE-2026-65637: Apache Tomcat: HTTP/2 no-authority...
Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection
A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...
OPENSUSE-SU-2026:21816-1 Security update for hauler
This update for hauler fixes the following issues: Changes in hauler: Update to 2.1.0 bsc1265425, CVE-2026-41888, bsc1278584, CVE-2026-56855,CVE-2026-56854,CVE-2026-78662,...
WordPress Inquiry cart plugin <= 3.4.2 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Inquiry Cart versions = 3.4.2...
WordPress WP Docs plugin <= 2.3.4 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by dodoh4t in WordPress Plugin WP Docs versions = 2.3.4...
WordPress Groundhogg plugin <= 4.7.1 - Path Traversal vulnerability
Path Traversal vulnerability discovered by Sergei Pro in WordPress Plugin Groundhogg versions = 4.7.1...
CVE-2026-86082
creationtimestamp| type| source ---|---|--- 2026-09-09 10:57:03+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-7...
CVE-2026-86075
creationtimestamp| type| source ---|---|--- 2026-09-09 10:56:59+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-n8n-7 2026-09-12 14:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdavovp6c25...
CVE-2025-3271
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...
CVE-2026-87795
zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory reads. Attackers can supply untrusted offset or length values to read native heap memory into the compression dictionary, typically causing JVM crashe...
CVE-2025-3271
CVE-2025-3271 is attributed in the initial record to a DOM-based XSS in OpenText Documentum Webtop versions prior to 16.7.1 , rated CVSS 4.0 4.8 (MEDIUM) requiring low privileges and active user interaction with low impact on confidentiality and integrity. A connected PT Security entry (PT-2025-2...
CVE-2025-3271 DOM-based XSS vulnerability in OpenText™ Documentum Webtop
Documentum Webtop versions prior to 16.7.1 software is vulnerable to an XSS...
CVE-2026-80055
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application editions contain an LDAP Injection vulnerability in versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). An unauthenticated attacker with remote access could exploit this flaw to achieve script injection . The CNA-a...
WordPress WP plugin Hostgator plugin <= 3.2.0 - Unauthenticated Authentication Bypass vulnerability
Unauthenticated Authentication Bypass vulnerability discovered by sorin vasile in WordPress Plugin WP Plugin Hostgator versions = 3.2.0...
CVE-2026-81741
The Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin before 4.7.2 does not restrict the redirect target of its email preference confirmation flow to the site's own host, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL by way of a crafte...
MAL-2026-16071 Malicious code in cat-sis2go-utils (npm)
cat-sis2go-utils is a dependency-confusion package published against the SIS2GO namespace, with versions inflated to 99.0.0 and 99.1.0. It ships no library code index.js is an 87-byte stub, and package.json declares both preinstall and postinstall running node scripts/run.js, so the payload...
CVE-2026-87733
An issue was discovered in the mirage-crypto-ec function before 2.2.0 for OCaml. The ECDSA functions P256,P384,P521.Dsa.pubofoctets accept 0x00, the encoding of the point at infinity, as a public key. With that public key, signatures can be forged without a private key...
UBUNTU-CVE-2026-87735
An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an undocumented exception for a small message during RSA decryption or encryption...
CVE-2026-21107
CVE-2026-21107 is an out-of-bounds write vulnerability in Samsung Notes prior to version 4.4.45.5 , allowing a local attacker with low privileges to write to out-of-bounds memory. The CVSS 4.0 base score is 6.9 (MEDIUM) , with a local attack vector, low complexity, and no user interaction require...
