490112 matches found
CVE-2026-86139
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow...
[slackware-security] mozilla-firefox
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.15.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...
[SECURITY] Fedora 44 Update: composer-2.10.3-1.fc44
Composer helps you declare, manage and install dependencies of PHP projects, ensuring you have the right stack everywhere. Documentation: https://getcomposer.org/doc/...
SUSE CVE-2026-52856
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, a malformed packet received during the SFTP connection handshake causes a Go panic. This issue is fixed in version 1.13.0...
EUVD-2026-71775
In Ignition 8.1.53 and earlier, the Gateway "Create Project Roles" setting shipped blank, which permitted any authenticated user to create projects if they can execute gateway scripts. Ignition 8.1.54 restricts project creation to Designer sessions and no longer relies on this setting. The 8.3...
CVE-2026-18843: Improper Neutralization of Input During Web Page Generation
The Beaver Builder Plugin Starter Version plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'noresultsmessage' nodepreview Parameter in all versions up to, and including, 2.11.0.1 due to insufficient input sanitization and output escaping. This makes it possible for...
PT-2026-86302
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...
Slackware Linux 15.0 / current mozilla-firefox Multiple Vulnerabilities (SSA:2026-247-02)
The version of mozilla-firefox installed on the remote host is prior to 140.15.0esr / 153.2.0esr. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-247-02 advisory. New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues...
CVE-2026-82474 affecting package sudo for versions less than 1.9.17-3
CVE-2026-82474 affecting package sudo for versions less than 1.9.17-3. A patched version of the package is available...
CVE-2026-44506
creationtimestamp| type| source ---|---|--- 2026-09-04 20:20:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117214622691306928 2026-09-04 20:20:04+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3muprz6fxze2v...
EUVD-2026-45906
SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL path...
CVE-2026-53932 wnx/laravel-backup-restore: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') and Improper Neutralization of Special Elements used in a Command ('Command Injection')
laravel-backup-restore restores database backups made with spatie/laravel-backup. Prior to version 1.9.4, a crafted backup archive can trigger OS command injection during database restore. This issue has been patched in version 1.9.4...
CVE-2026-53761
Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication bypass vulnerability via logged invitation keys in crm/api. This issue has been patched in version 1.73.0...
EUVD-2026-71633
Frappe CRM is an open-source customer relationship management tool. Prior to version 1.73.0, there is an authentication bypass vulnerability via logged invitation keys in crm/api. This issue has been patched in version 1.73.0...
CVE-2026-85636 jofpin trape Login Endpoint stats.py missing authentication
A vulnerability was identified in jofpin trape 1.0.0. Affected by this vulnerability is an unknown functionality of the file core/stats.py of the component Login Endpoint. The manipulation leads to missing authentication. The attack may be initiated remotely. The exploit is publicly available and...
authelia v4.39.22
!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...
EUVD-2026-71257
IBM QRadar 7.5.0 through 7.5.0 UP15 Interim Fix 005 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data...
CVE-2026-19727
CVE-2026-19727 is an XSS (targeting HTML attributes) vulnerability in the Yordam Information Technology Consulting Library Information and Document Automation Program , caused by improper neutralization of input during web page generation. The issue affects versions before v22.2 and is rated CVSS...
opencode v1.18.27
The open source AI coding agent. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt Installation YOLO curl -fsSL...