160198 matches found
python313-idna-3.19-1.1 on GA media (moderate)
python313-idna-3.19-1.1 on GA media Announcement ID: openSUSE-SU-2026:11711-1 Rating: moderate Cross-References: CVE-2024-3651 CVSS scores: CVE-2024-3651 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now ...
python313-dnspython-2.8.0-2.1 on GA media (moderate)
python313-dnspython-2.8.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11709-1 Rating: moderate Cross-References: CVE-2023-29483 CVSS scores: CVE-2023-29483 SUSE : 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: openSUSE Tumbleweed An update that solves one vulnerability...
perl-Net-DNS-1.570.0-1.1 on GA media (moderate)
perl-Net-DNS-1.570.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11708-1 Rating: moderate Cross-References: CVE-2026-81928 CVSS scores: CVE-2026-81928 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can n...
CVE-2026-87058
A flaw was found in olm-operator-konflux-sample. The hermetic build mode is disabled by default, allowing bundle builds to perform live network fetches. This means that external, unverified resources can be pulled during the build process, potentially compromising the integrity and trustworthines...
Aegis aegis-v0.14.1-alpha
AEGIS is a desktop app for monitoring local AI agents and reviewing their files and selected actions. Inspect processes, sensitive-file observations, TCP endpoints and attribution evidence in Observatory. Monitoring requires no agent plugin; policy-controlled execution and MCP action tools requir...
EUVD-2026-56392
Microsoft QUIC: Remote Code Execution Vulnerability...
Improper Removal of Sensitive Information Before Storage or Transfer
Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer due to improper removal of sensitive information before storage or transfer. An attacker can gain unauthorized access to confidential data by intercepting network...
EUVD-2026-56408
Microsoft Security Advisory CVE-2026-62900 – .NET Information Disclosure Vulnerability...
Improper Removal of Sensitive Information Before Storage or Transfer
Overview Affected versions of this package are vulnerable to Improper Removal of Sensitive Information Before Storage or Transfer due to improper removal of sensitive information before storage or transfer. An attacker can gain unauthorized access to confidential data by intercepting network...
EUVD-2026-74067
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative...
CVE-2026-75999 ColdFusion | Improper Input Validation (CWE-20)
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative...
CVE-2026-69646
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network...
CVE-2026-66308
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network...
CVE-2026-66305
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...
CVE-2026-66306
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network...
CVE-2026-66307
Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...
CVE-2026-66303
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...
CVE-2026-66304
Server-side request forgery ssrf in Skype for Business allows an unauthorized attacker to disclose information over a network...
CVE-2026-28616
In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...