261924 matches found
DEBIAN-CVE-2026-44230
RT is an open source, enterprise-grade issue and ticket tracking system. Versions 5.0.4 up to but not including 5.0.10, and 6.0.0 up to but not including 6.0.3 contain a reflected Cross-Site Scripting XSS vulnerability where an attacker who can induce an authenticated RT user to visit a crafted U...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: helm4: helm4-4.2.3-0.1.2.hum1 aarch64, x8664 helm4-4.2.3-0.1.2.hum1.src src Security Fixes: helm4: CVE-2026-63308...
CVE-2026-63731
creationtimestamp| type| source ---|---|--- 2026-07-20 20:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr43iedw2s23 2026-07-21 05:00:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mr4znx6h572j 2026-07-21 05:00:47+00:00| seen|...
CVE-2026-44584
Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...
CVE-2026-44584
Paymenter documents describe a vulnerability where the email update flow does not reset or revalidate the existing email verification status. In versions prior to 1.5.0, a user can change their email while remaining marked as verified, potentially misrepresenting email ownership and bypassing ver...
CVE-2026-44584 Paymenter doesn't reset email verification status after email change
Paymenter is a free and open-source webshop solution for management of hosting services. In versions prior to 1.5.0, the email update functionality fails to invalidate the existing verification state when a user changes their email address, allowing a verified account to retain its verified statu...
CVE-2026-53593
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the denylist that neutralizes dangerous file uploads Helper::$restrictedextensions is incomplete: it does not cover the .pht extension. The authenticated upload endpoint POST /uploads/uplo...
CVE-2026-50743
creationtimestamp| type| source ---|---|--- 2026-07-20 19:20:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3zaum4cl2q...
DEBIAN-CVE-2026-64194
Net::DNS versions through 1.55 for Perl allow Denial of Service via deep DNS compression pointer chains. Net::DNS::DomainName::decode follows RFC 1035 compression pointers by recursing into itself with no depth limit. It is possible to construct a name which saturates the call stack at least with...
MGASA-2026-0280 Updated nilfs-utils packages fix security vulnerability
Undefined Behavior and Out-of-Memory via Unvalidated slogblocksize. CVE-2026-55392...
MGASA-2026-0275 Updated haveged package fixes a security vulnerability
The updated package fixes a security vulnerability: Privilege escalation via command socket. CVE-2026-41054...
Updated xmlstarlet package fixes a security vulnerability
The updated package fixes a security vulnerability: XML external entity vulnerability. References: https://lists.fedoraproject.org/archives/list/[email protected] oraproject.org/message/KDR5XRMVBCDZ4HWDCGLKDVKGSCWACG33/...
MGASA-2026-0282 Updated graphicsmagick packages fix a security vulnerability
The updated packages fix a security vulnerability: Use-After-Free in MSL decoder. CVE-2026-46523...
MGASA-2026-0281 Updated python-nltk packages fix security vulnerability
URL-Encoded Path Traversal in nltk.data.load Allows Arbitrary Local File Read. CVE-2026-54293...
MGASA-2026-0286 Updated perl-CGI-Session package fixes a security vulnerability
The updated package fixes a security vulnerability: CGI::Session::ID::md5 versions before 4.49 for Perl generate predictable session ids from low-entropy sources. CVE-2026-56016...
Updated nilfs-utils packages fix security vulnerability
Undefined Behavior and Out-of-Memory via Unvalidated slogblocksize. CVE-2026-55392...
Updated graphicsmagick packages fix a security vulnerability
The updated packages fix a security vulnerability: Use-After-Free in MSL decoder. CVE-2026-46523...
Updated haveged package fixes a security vulnerability
The updated package fixes a security vulnerability: Privilege escalation via command socket. CVE-2026-41054...
Updated perl-JavaScript-Minifier-XS package fixes security vulnerabilities
The updated package fixes security vulnerabilities: JavaScript::Minifier::XS versions before 0.16 for Perl crash with a NULL pointer dereference when the first meaningful token of the input is a slash. CVE-2026-56017 JavaScript::Minifier::XS versions before 0.16 for Perl leak memory on every call...