CVE-2026-34527: Use of Weak Hash

Sandboxie-Plus is an open source sandbox-based isolation software for Windows. In versions 1.17.2 and earlier, SbieIniServer::HashPassword converts a SHA-1 digest to hexadecimal incorrectly. The high nibble of each byte is shifted right by 8 instead of 4, which always produces zero for an 8-bit...

CVE-2026-5192: Improper Limitation of a Pathname to a Restricted Directory

The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Path Traversal in versions up to, and including, 1.52.1 via the 'upload-1filefilepath' parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary...

Time-of-check Time-of-use (TOCTOU) Race Condition

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Time-of-check Time-of-use TOCTOU Race Condition due to a race condition in the process that reads and verifies files before returning bytes. An attacker can access data outside the intend...

Information Exposure

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Information Exposure in the analysis of allowlisted commands containing unquoted heredocs. An attacker can cause unintended shell expansion by crafting a command that hides malicious code...

Access Control Bypass

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Access Control Bypass via the MCP loopback process. An attacker can gain unauthorized access to owner-gated operations by spoofing owner-context metadata in request headers. Remediation...

[SECURITY] [DLA 4562-1] thunderbird security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4562-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort May 04, 2026 https://wiki.debian.org/LTS -...

OPENSUSE-SU-2026:10674-1 curl-8.20.0-1.1 on GA media

These are all security issues fixed in the curl-8.20.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-31673 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31673 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31599 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31599 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31655 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31655 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31628 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31628 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31623 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31623 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31642 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31642 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31646 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31646 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31508 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31508 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31629 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31629 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31671 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31671 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31637 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31637 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31667 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31667 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-31639 affecting package kernel for versions less than 6.6.137.1-1

CVE-2026-31639 affecting package kernel for versions less than 6.6.137.1-1. An upgraded version of the package is available that resolves this issue...