Security update for go1.26 (important)

openSUSE security update: security update for go1.26 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20571-1 Rating: important References: bsc1255111 bsc1261653 bsc1261654 bsc1261655 bsc1261656 bsc1261657 bsc1261658 bsc1261659 bsc1261660 bsc1261661...

SUSE: Security Advisory (SUSE-SU-2026:1321-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for go1.26

This update for go1.26 fixes the following issues: Update to go1.26.2 bsc1255111. CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG bsc1261653. CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination bsc1261654. CVE-2026-27144: cmd/compile: no-op...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, timoni, pulumi-language-java, calico, cloud-provider-azure, k8s-device-plugin, polaris, custom-pod-autoscaler, helm, kubescape-operator, pluto, aws-s3-controller, sbom-convert, verticadb-operator, rancher-agent, knative-client,...

CVE-2026-32280 vulnerabilities

Vulnerabilities for packages: aws-signer-notation-plugin-fips, amazon-ecs-agent, kubevirt-cdi-uploadserver-fips, spicedb-operator, rancher-telemetry, wgcf, crossplane-provider-azure-sql, yunikorn-web, crossplane-provider-aws-firehose-fips, smarter-device-manager,...

BELL-CVE-2026-32280

Bulletin has no description...

CVE-2026-32280

creationtimestamp| type| source ---|---|--- 2026-04-08 04:27:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mixhc6vmqn2q 2026-04-08 23:32:24+00:00| seen| Telegram/aEQe0P-AMU0sS3Jz8wPVEzQz8QZjOsktArIVrJmPyKpvP4 2026-04-08 23:32:47+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-32280

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in...

CVE-2025-32280

creationtimestamp| type| source ---|---|--- 2025-04-04 16:36:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10491 2025-04-04 17:07:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llyvpxxhlo2i 2025-04-04 20:32:14+00:00| seen| https://t.me/cvedetector/22156 2026-04-01...

CVE-2025-32280

Cross-Site Request Forgery CSRF vulnerability in weDevs WP Project Manager wedevs-project-manager allows Cross Site Request Forgery.This issue affects WP Project Manager: from n/a through 2.6.25...

CVE-2025-32280 WordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in weDevs WP Project Manager wedevs-project-manager allows Cross Site Request Forgery.This issue affects WP Project Manager: from n/a through 2.6.25...

WordPress WP Project Manager plugin < 2.6.25 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Manab Jyoti Dowarah in WordPress Plugin WP Project Manager versions 2.6.25...

RHEL 7 : transfig (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - transfig: Buffer underwrite in read.c:getline via crafted FIG file CVE-2018-16140 - An array index error ...

RHEL 6 : transfig (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - transfig: Buffer underwrite in read.c:getline via crafted FIG file CVE-2018-16140 - An array index error ...

CVE-2023-32280

creationtimestamp| type| source ---|---|--- 2024-03-06 12:41:22+00:00| seen| https://t.me/ctinow/201283...

CentOS 9 : transfig-3.2.7b-9.el9

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the transfig-3.2.7b-9.el9 build changelog. - An issue was discovered in fig2dev before 3.2.8.. A NULL pointer dereference exists in the function computeclosedspline located in transspline.c...

CVE-2023-32280

Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...

CVE-2023-32280

Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...

CVE-2023-32280

CVE-2023-32280 affects Intel Server OpenBMC firmware prior to egs-1.05. Root cause: insufficiently protected credentials, enabling an unauthenticated user to disclose information over the network. Impact per sources: information disclosure with network access; CVSS v3.1 base score 5.3 (AV:N/AC:L/...

Amazon Linux AMI : transfig (ALAS-2023-1807)

The version of transfig installed on the remote host is prior to 3.2.7b-10.8. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1807 advisory. 2024-06-07: CVE-2019-19797 was added to this advisory. An out-of-bounds write flaw was found in transfig in the way th...