490114 matches found
Security update for suseconnect-ng
This update for suseconnect-ng fixes the following issue: Update version to 1.23.0: Use product identifier for product migrations. bsc1268596 Switch to using go1.26-openssl as the default Go version to install to support building the package jscSCC-843, bsc1268900. Fix flag parsing so that unknow...
SUSE-SU-2026:3961-1 Security update for suseconnect-ng
This update for suseconnect-ng fixes the following issue: - Update version to 1.23.0: - Use product identifier for product migrations. bsc1268596 - Switch to using go1.26-openssl as the default Go version to install to support building the package jscSCC-843, bsc1268900. - Fix flag parsing so tha...
org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Server impersonation via improper TLS hostname verification
A flaw was found in the asynchronous version of Apache HttpComponents Client. This improper Transport Layer Security TLS hostname verification vulnerability allows a remote attacker to intercept and modify network traffic. By presenting a valid certificate for a different domain, an attacker can...
CVE-2026-79679 Use of Weak Credentials
Use of Weak Credentials vulnerability in B&R Industrial Automation GmbH mapp Audit used in mapp Services. This issue affects mapp Audit used in mapp Services: before 6.8.0...
Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.2
cert-manager Operator for Red Hat OpenShift 1.19.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...
Important: Red Hat Security Advisory: Red Hat OpenShift GitOps v1.19.7 security update
Important: Red Hat OpenShift GitOps v1.19.7 security update An update is now available for Red Hat OpenShift GitOps...
WordPress Pre-Orders for WooCommerce plugin <= 2.3.1 - Bypass Vulnerability vulnerability
Bypass Vulnerability vulnerability discovered by MoonFuji in WordPress Plugin Pre-Orders for WooCommerce versions = 2.3.1...
WordPress Photo Gallery by 10Web plugin < 1.8.44 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Muni Nitish Kumar Yaddala in WordPress Plugin Photo Gallery by 10Web versions 1.8.44...
WordPress Advanced Custom Fields: Extended plugin < 0.9.2.7 - Unauthenticated Administrator Account Takeover vulnerability
Unauthenticated Administrator Account Takeover vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin ACF Extended versions 0.9.2.7...
kernel: NFSv4/flexfiles: reject zero filehandle version count
A flaw was found in the Linux kernel's NFSv4 Network File System version 4 flexfiles component. This vulnerability occurs when the fflayoutalloclseg function processes a malformed flexfiles layout that specifies a zero filehandle version count. An attacker could exploit this by providing a...
PT-2026-85088
Unauthenticated Cross Site Scripting XSS in Simple Payment = 2.5.1 versions...
PT-2026-85112
Unauthenticated Denial of Service Attack in MalCare Security = 6.69 versions...
PT-2026-85117
Unauthenticated SQL Injection in GeoDirectory = 2.8.174 versions...
perl-GD security update
2.49-3.0.1 - Security update for CVE-2026-11526 Orabug: 39825996...
PT-2026-85123
Unauthenticated Bypass Vulnerability in Pre-Orders for WooCommerce = 2.3 versions...
PT-2026-85107
Unauthenticated Bypass Vulnerability in BookIt = 2.6.0.3 versions...
PT-2026-85105
Unauthenticated Cross Site Scripting XSS in Breadcrumb NavXT = 7.5.1 versions...
PT-2026-85099
Subscriber Privilege Escalation in WCFM Membership = 2.11.11 versions...