Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to go1.25.9 bsc1244485. CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. CVE-2026-27144: cmd/compile:...

openSUSE 16 Security Update : go1.25 (openSUSE-SU-2026:20570-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20570-1 advisory. - Update to version go1.25.9 bsc1244485. - CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. - CVE-2026-27143:...

Security update for go1.26 (important)

openSUSE security update: security update for go1.26 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20571-1 Rating: important References: bsc1255111 bsc1261653 bsc1261654 bsc1261655 bsc1261656 bsc1261657 bsc1261658 bsc1261659 bsc1261660 bsc1261661...

SUSE: Security Advisory (SUSE-SU-2026:1321-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for go1.26

This update for go1.26 fixes the following issues: Update to go1.26.2 bsc1255111. CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. CVE-2026-27144: cmd/compile: no-op...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: secrets-store-csi-driver-provider-azure, dockerize, cloud-provider-azure, descheduler, apache-exporter, direnv, buildah, mods, paranoia, pguser, volume-modifier-for-k8s, xeol, redpanda, nri-haproxy, aws-signer-notation-plugin, kubescape, redka, mc, nova,...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: atlantis-fips, mongodb-kubernetes-operator-fips, helm-mapkubeapis, smarter-device-manager, cilium-cli, conftest-fips, terraform-provider-aws-fips, vertical-pod-autoscaler, yace-fips, dataplaneapi-fips, mongodb-kubernetes-operator, pushprox, virt-api-fips, rook,...

BELL-CVE-2026-32280

Bulletin has no description...

CVE-2026-32280

creationtimestamp| type| source ---|---|--- 2026-04-08 04:27:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixhc6vmqn2q 2026-04-08 23:32:24+00:00| seen| Telegram/aEQe0P-AMU0sS3Jz8wPVEzQz8QZjOsktArIVrJmPyKpvP4 2026-04-08 23:32:47+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-32280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in...

CVE-2025-32280

creationtimestamp| type| source ---|---|--- 2025-04-04 16:36:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10491 2025-04-04 17:07:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyvpxxhlo2i 2025-04-04 20:32:14+00:00| seen| https://t.me/cvedetector/22156 2026-04-01...

CVE-2025-32280

Cross-Site Request Forgery CSRF vulnerability in weDevs WP Project Manager wedevs-project-manager allows Cross Site Request Forgery.This issue affects WP Project Manager: from n/a through 2.6.25...

CVE-2025-32280 WordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in weDevs WP Project Manager wedevs-project-manager allows Cross Site Request Forgery.This issue affects WP Project Manager: from n/a through 2.6.25...

WordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Manab Jyoti Dowarah in WordPress Plugin WP Project Manager versions 2.6.25...

RHEL 7 : transfig (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - transfig: Buffer underwrite in read.c:getline via crafted FIG file CVE-2018-16140 - An array index error ...

RHEL 6 : transfig (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - transfig: Buffer underwrite in read.c:getline via crafted FIG file CVE-2018-16140 - An array index error ...

CVE-2023-32280

creationtimestamp| type| source ---|---|--- 2024-03-06 12:41:22+00:00| seen| https://t.me/ctinow/201283...

CentOS 9 : transfig-3.2.7b-9.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the transfig-3.2.7b-9.el9 build changelog. - An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function computeclosedspline located in transspline.c...

CVE-2023-32280

Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...

CVE-2023-32280

Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...