262007 matches found
GHSA-J22C-2H2Q-55PV vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-vmware, linux-gcp, linux-azure, linux-qemu-melange...
GHSA-83PQ-FMF8-563Q vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-vmware, linux-gcp, linux-azure, linux-qemu-melange...
GHSA-QC6F-VG59-3945 vulnerabilities
Vulnerabilities for packages: linux-qemu, linux-vmware, linux-gcp, linux-azure, linux-qemu-melange...
GHSA-79CF-XCQC-C78W vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-katib...
CVE-2026-31767
creationtimestamp| type| source ---|---|--- 2026-07-09 01:17:05+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260702...
CVE-2026-59820
creationtimestamp| type| source ---|---|--- 2026-07-09 00:15:16+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-59820 2026-07-13 16:54:00+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqk5rxa4vk2f...
CVE-2026-15138 tumf mcp-text-editor text_editor.py _validate_file_path path traversal
A security vulnerability has been detected in tumf mcp-text-editor up to 1.0.2. This issue affects the function validatefilepath of the file mcptexteditor/texteditor.py. Such manipulation of the argument filepath leads to path traversal. The attack can be launched remotely. The exploit has been...
PT-2026-57027
Name of the Vulnerable Software and Affected Versions YesWiki versions prior to 4.6.6 Description An issue exists in the erasespamedcomments wiki action, located in actions/EraseSpamedCommentsAction.php, which allows unauthenticated users to permanently delete arbitrary wiki pages. The action...
GitLab 16.10 < 18.11.7 / 19.0 < 19.0.4 / 19.1 < 19.1.2 (CVE-2026-13151)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticat...
CVE-2026-33630
Unknown description...
UBUNTU-CVE-2026-45095
Unknown description...
UBUNTU-CVE-2026-49861
Unknown description...
Security update for openQA, os-autoinst (moderate)
openSUSE Security Update: Security update for openQA, os-autoinst Announcement ID: openSUSE-SU-2026:0235-1 Rating: moderate References: 1244139 1245378 1245379 1257852 1258632 1259005 1264376 Cross-References: CVE-2026-25547 CVSS scores: CVE-2026-25547 SUSE: 7.5...
PT-2026-56826
Name of the Vulnerable Software and Affected Versions n8n versions prior to 1.123.61 n8n versions prior to 2.27.4 n8n versions prior to 2.28.1 Description An authenticated member with use-only editor access to a shared workflow can read credential-populated headers exposed via the $request object...
CVE-2025-63579
Unauthorized use of Kyocera printers, allows all information stored in the Kyocera address book to be exported. The security measure that encrypts incoming data ian be bypassed with this vulnerability, allowing encrypted data to be decrypted. Passwords and other sensitive information can be...
CVE-2026-58387
Unknown description...
PT-2026-56883
Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.10.0 Description The file upload path fails to apply the necessary write-access checks when the metadata.knowledge id variable is provided. This allows users with read-only permissions to bypass the security...
Erlang/OTP 20.0 < 27.3.4.14 / 28.0 < 28.5.0.3 / 29.0 < 29.0.3 DTLS Cookie Bypass (CVE-2026-54887)
The version of Erlang/OTP installed on the remote host is 20.0 prior to 27.3.4.14, 28.0 prior to 28.5.0.3, or 29.0 prior to 29.0.3. It is, therefore, affected by a vulnerability: - Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl DTLS server allows predictable DTLS cookie...
org.hl7.fhir.core: ReDoS via FHIRPath matches()/replaceMatches() in FHIR Validator HTTP Endpoint
All implementations of FHIRPathEngine accept arbitrary FHIRPath expressions and evaluate them without input validation. The utility intended to secure this evaluation did so incorrectly, and did not fully cover all places in which evaluation was being done. An attacker can send a resource...