18 matches found
CLEANSTART-2026-GA94672 Security fixes in elasticsearch 9.4.4-r4
Package elasticsearch version 9.4.4-r4 fixes 38 vulnerabilities: CVE-2026-54516, CVE-2026-54517, CVE-2026-54518, CVE-2026-13506, CVE-2026-12816...
openSUSE 16: bouncycastle / bouncycastle-javadoc / bouncycastle-jmail / etc (openSUSE-SU-2026:21538-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21538-1 advisory. Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. -...
Security update for bouncycastle (critical)
openSUSE security update: security update for bouncycastle ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21538-1 Rating: critical References: bsc1272700 bsc1272701 bsc1272702 bsc1272703 bsc1272704 bsc1272705 bsc1272707 bsc1272708 bsc1272709...
OPENSUSE-SU-2026:21538-1 Security update for bouncycastle
This update for bouncycastle fixes the following issues: Update to 1.85. Security issues fixed: - CVE-2026-8763: Name Constraints bypass via trailing dot in rfc822Name and URI bsc1272700. - CVE-2026-12185: BKS/UBER keystore allocates from untrusted lengths before integrity check bsc1272701. -...
CVE-2026-13506 vulnerabilities
Vulnerabilities for packages: bouncycastle-fips...
CVE-2026-13506
creationtimestamp| type| source ---|---|--- 2026-08-03 11:22:50+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-13506...
Linux Distros Unpatched Vulnerability : CVE-2026-13506
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12...
SUSE CVE-2026-13506
In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
CVE-2025-13506
Execution with Unnecessary Privileges vulnerability in Nebim Neyir Computer Industry and Services Inc. Nebim V3 ERP allows Expanding Control over the Operating System from the Database.This issue affects Nebim V3 ERP: from 2.0.59 before 3.0.1...
CVE-2025-13506
creationtimestamp| type| source ---|---|--- 2025-12-12 12:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7s56ikt5g2c...
CVE-2024-13506
creationtimestamp| type| source ---|---|--- 2025-02-11 11:15:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhvjsrhhua22 2025-02-11 13:11:14+00:00| seen| https://t.me/cvedetector/17705...
CVE-2024-13506
CVE-2024-13506 : GeoDirectory – WP Business Directory Plugin and Classified Listings Directory (WordPress)
CVE-2024-13506 GeoDirectory – WP Business Directory Plugin and Classified Listings Directory <= 2.8.97 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Display_name Parameter
The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the displayname profile parameter in all versions up to, and including, 2.8.97 due to insufficient input sanitization and output escaping. This...
CVE-2020-13506
CVE-2020-13506 is rejected/not used; this candidate was withdrawn and does not represent an active vulnerability entry.
CVE-2019-13506
CVE-2019-13506 affects @nuxt/devalue before 1.2.3 (used in Nuxt.js before 2.6.2). The root cause is mishandling of object keys, leading to Cross-Site Scripting (XSS). Impact: potential XSS via object keys in affected builds; CVSS ~6.1 (NVD v3). Mitigation: upgrade to @nuxt/devalue 1.2.3 or later ...
CVE-2019-13506
@nuxt/devalue before 1.2.3, as used in Nuxt.js before 2.6.2, mishandles object keys, leading to XSS...
CVE-2018-13506
The CVE-2018-13506 entry refers to a vulnerability in the SDR22 Ethereum token contract where the mintToken function contains an integer overflow. This overflow enables the contract owner to set the balance of an arbitrary user to any value. The affected component is the mintToken function within...