171148 matches found
CVE-2026-61227
...
CVE-2026-61038
Oracle WebCenter Sites 12.2.1.4.0 and 14.1.2.0.0 are vulnerable to an unauthenticated, network-accessible HTTP exploit (CVSS 8.2 HIGH) enabling unauthorized data access and partial data modification. Oracle's August 2026 CPU advisory (linked in references) is the primary source for patch details....
CVE-2026-61016
...
CVE-2026-60861
...
CVE-2026-60753
...
Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch
Summary GHSA-89gg-p5r5-q6r4 claims the pickle deserialization vulnerability in algofrompickle was fixed in v1.5.2. However, monai/auto3dseg/utils.py has not been modified since 2024-07-12 — 18 months before v1.5.2 was released 2026-01-29. All three pickle.loads calls remain unchanged. The fix was...
MINI-WG7P-W5MQ-8G6H
Bulletin has no description...
CLSA-2026-1787070801 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 6 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.4...
Important: Red Hat Security Advisory: kpatch-patch-5_14_0-427_100_1, kpatch-patch-5_14_0-427_113_1, kpatch-patch-5_14_0-427_126_1, kpatch-patch-5_14_0-427_68_2, and kpatch-patch-5_14_0-427_84_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
CVE-2026-50138 goshs: WebDAV listener ignores --read-only, --upload-only, and --no-delete mode flags
goshs is a SimpleHTTPServer written in Go. Prior to version 2.1.0, when goshs is launched with WebDAV enabled -w, the mode-restriction flags --read-only, --upload-only, and --no-delete are enforced only on the primary HTTP port. The WebDAV port is wired straight to golang.org/x/net/webdav.Handler...
diaphora v3.4.2
δiaphora Installation Install with the Hex-Rays plugin manager: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing...
CVE-2026-71556 affecting package packer for versions less than 1.9.5-19
CVE-2026-71556 affecting package packer for versions less than 1.9.5-19. A patched version of the package is available...
MINI-8W8R-3P4V-2RFR
Bulletin has no description...
MINI-V835-2RJG-RJ7M
Bulletin has no description...
CLSA-2026-1787058472 TuxCare security update for 40 packages (1 CVE)
TuxCare rebuilt 40 packages to address 1 CVE. Fixed in 10.1.42-tuxcare.8...
New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles
You can’t patch everything. So what do you fix first? Findings in Q2 2026 have changed traditional answers. The latest Quarterly Threat Landscape Report from Rapid7 Labs shows vulnerability disclosures still surging while attackers use automation and AI-assisted tooling to compress the time betwe...
CVE-2026-74977
Integer overflow in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
SUSE-SU-2026:23210-1 Security update for patch
This update for patch fixes the following issues - CVE-2021-45261: Invalid Pointer via anotherhunk function bsc1194037. - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence bsc1271167. - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of...
EUVD-2024-55726
A security vulnerability has been detected in OpenBoxes up to 0.9.1. This issue affects the function DocumentController of the file grails-app/controllers/org/pih/warehouse/core/DocumentController.groovy of the component Document Upload Controller. The manipulation leads to unrestricted upload. I...