1037720 matches found
Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.6-0.2.hum1 aarch64, x8664 grafana12.4-12.4.6-0.2.hum1.src src...
Low: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana13.1: grafana13.1-13.1.1-0.2.hum1 aarch64, x8664 grafana13.1-13.1.1-0.2.hum1.src src...
goshs has ACL Bypass & Path Traversal
Summary sendFile derives the served filename from the raw request path while opening the file from the cleaned path, so appending a trailing slash empties the derived name and defeats both the never-serve rule for the ACL file and the block list. Finding Medium: trailing-slash ACL and hidden-file...
CVE-2026-54658 @hypequery/clickhouse has SQL Injection in parameter escaping that allows arbitrary SQL execution
Hypequery is a TypeScript semantic layer for ClickHouse. Prior to 2.0.2, escapeValue in packages/clickhouse/src/core/utils.ts did not escape backslashes before single quotes during parameter substitution, allowing attacker controlled query parameters with a trailing backslash to escape the closin...
Chromium: CVE-2026-15116 Use after free in Actor
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-15110 Use after free in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.4 security update
Red Hat Advanced Cluster Management for Kubernetes v2.15 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...
CVE-2026-55554 Dompdf: Chroot Validation Bypass
Dompdf is an HTML to PDF converter for PHP. In versions 3.15 and prior, the validateLocalUri method enforces chroot boundaries with a strpos prefix check after normalizing paths with realpath . Because normalization strips the trailing directory separator from $chrootPath , the check only...
SUSE-SU-2026:3393-1 Security update for the Linux Kernel (Live Patch 15 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.55 fixes various security issues: The following security issues were fixed: - CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. - CVE-2026-53366: ipv4: account for fraggap on the paged...
CVE-2026-54620
sqlite3-ruby (Ruby bindings for SQLite3) is affected by a Use-After-Free in aggregate function callbacks. From versions 2.1.0 through 2.9.4, callbacks for aggregate functions can be freed while still referenced during aggregation, causing an invalid memory read or a segmentation fault. The issue ...
Security update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn
This update for apache-commons-lang3, google-guice, maven, maven-resolver, xmvn fixes the following issues: apache-commons-lang3 was updated to 3.20.0: New features: Add SystemProperties.getPathString, Supplier Add JavaVersion.JAVA25 Add JavaVersion.JAVA26 Add SystemUtils.ISJAVA25 Add...
Security update for the Linux Kernel (Live Patch 84 for SUSE Linux Enterprise 12 SP5)
This update for the SUSE Linux Enterprise Kernel 4.12.14-122.317 fixes one security issue: The following security issue was fixed: CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. Patch Instructions: To install this SUSE update use the SUSE recommended...
CVE-2026-51260
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
Security update for the Linux Kernel (Live Patch 16 for SUSE Linux Enterprise 15 SP7)
This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.60 fixes various security issues: The following security issues were fixed: CVE-2026-53359: KVM: x86: Fix shadow paging use-after-free due to unexpected role bsc1270060. CVE-2026-53366: ipv4: account for fraggap on the paged...
Important: Red Hat Security Advisory: Multicluster Global Hub 1.7.2 security update
Multicluster Global Hub v1.7.2 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
CVE-2026-13858
An out of bounds read flaw was found in the FFmpeg component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507090179...
CVE-2026-13883
A type confusion flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500030250...
CVE-2026-13869
An use after free flaw was found in the Device component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497610642...