41192 matches found
CVE-2026-50258 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1
CVE-2026-50258 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-52858 affecting package vim for versions less than 9.2.0620-1
CVE-2026-52858 affecting package vim for versions less than 9.2.0620-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-42015 affecting package gnutls for versions less than 3.8.13-1
CVE-2026-42015 affecting package gnutls for versions less than 3.8.13-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-42013 affecting package gnutls for versions less than 3.8.13-1
CVE-2026-42013 affecting package gnutls for versions less than 3.8.13-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-52860 affecting package vim for versions less than 9.2.0620-1
CVE-2026-52860 affecting package vim for versions less than 9.2.0620-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-50263 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1
CVE-2026-50263 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-5419 affecting package gnutls for versions less than 3.8.13-1
CVE-2026-5419 affecting package gnutls for versions less than 3.8.13-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-47162 affecting package vim for versions less than 9.2.0620-1
CVE-2026-47162 affecting package vim for versions less than 9.2.0620-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-47167 affecting package vim for versions less than 9.2.0620-1
CVE-2026-47167 affecting package vim for versions less than 9.2.0620-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-50257 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1
CVE-2026-50257 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-50261 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1
CVE-2026-50261 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-5260 affecting package gnutls for versions less than 3.8.13-1
CVE-2026-5260 affecting package gnutls for versions less than 3.8.13-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-42012 affecting package gnutls for versions less than 3.8.13-1
CVE-2026-42012 affecting package gnutls for versions less than 3.8.13-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-50259 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1
CVE-2026-50259 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1. An upgraded version of the package is available that resolves this issue...
CVE-2026-50256 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1
CVE-2026-50256 affecting package xorg-x11-server-Xwayland for versions less than 24.1.12-1. An upgraded version of the package is available that resolves this issue...
User Impersonation
Overview @openclaw/qqbot is an OpenClaw QQ Bot channel plugin for group and direct-message workflows. Affected versions of this package are vulnerable to User Impersonation in the QQBot streaming command. An attacker can alter configuration settings by accessing the command without meeting explic...
CVE-2026-47138
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.77 and 9.9.1-alpha.1, an unauthenticated attacker who knows a publicly-known Parse Application ID can submit a single HTTP request whose client SDK version field contains...
CVE-2026-47138 Parse Server: Pre-authentication denial of service via client version header regex backtracking
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.77 and 9.9.1-alpha.1, an unauthenticated attacker who knows a publicly-known Parse Application ID can submit a single HTTP request whose client SDK version field contains...
EulerOS Virtualization 2.13.0 : polkit (EulerOS-SA-2026-2413)
According to the versions of the polkit packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in polkit. A local user can exploit this by providing a specially crafted, excessively long input to the...
