10324 matches found
PYSEC-2026-2866 pgAdmin 4: Stored cross-site scripting (XSS) vulnerability in Browser Tree and Explain Visualizer modules
Stored cross-site scripting XSS vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules. User-controlled PostgreSQL object names database, schema, table, column, etc. were assigned to DOM elements via innerHTML, allowing crafted object names containing HTML markup to execute...
PYSEC-2026-2871 pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities
Local file inclusion LFI and server-side request forgery SSRF vulnerabilities in pgAdmin 4 LLM API configuration endpoints. User-supplied apikeyfile and apiurl preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by...
PYSEC-2026-2870 pgAdmin 4: OS command injection vulnerability in Import/Export query export
OS command injection CWE-78 vulnerability in pgAdmin 4 Import/Export query export. User-supplied input was interpolated directly into a psql \copy metacommand template without sanitization. An authenticated user could inject " TO PROGRAM 'cmd'" to break out of the \copy ... context and achieve...
PT-2026-57299
RabbitMQ is a messaging and streaming broker. Prior to 4.2.5, the RabbitMQ management UI renders the x-internal-purpose queue or exchange argument into an HTML title attribute without proper escaping on the Queues and Exchanges pages, allowing a user with permission to declare a queue or exchange...
TencentOS Server 4: rust (TSSA-2026:0559)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0559 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
TencentOS Server 4: grafana (TSSA-2026:0562)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0562 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
TencentOS Server 4: freerdp (TSSA-2026:0561)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0561 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
TencentOS Server 4: vim (TSSA-2026:0573)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0573 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
TencentOS Server 4: ignition (TSSA-2026:0439)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0439 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2025-15661 affecting package libssh2 for versions less than 1.11.1-4
CVE-2025-15661 affecting package libssh2 for versions less than 1.11.1-4. A patched version of the package is available...
CVE-2026-25681 affecting package containerd2 for versions less than 2.2.4-4
CVE-2026-25681 affecting package containerd2 for versions less than 2.2.4-4. A patched version of the package is available...
CVE-2026-42502 affecting package dasel for versions less than 2.8.1-4
CVE-2026-42502 affecting package dasel for versions less than 2.8.1-4. A patched version of the package is available...
CVE-2026-42506 affecting package dasel for versions less than 2.8.1-4
CVE-2026-42506 affecting package dasel for versions less than 2.8.1-4. A patched version of the package is available...
CVE-2026-27136 affecting package dasel for versions less than 2.8.1-4
CVE-2026-27136 affecting package dasel for versions less than 2.8.1-4. A patched version of the package is available...
CVE-2026-42502 affecting package containerd2 for versions less than 2.2.4-4
CVE-2026-42502 affecting package containerd2 for versions less than 2.2.4-4. A patched version of the package is available...
CVE-2026-25680 affecting package dasel for versions less than 2.8.1-4
CVE-2026-25680 affecting package dasel for versions less than 2.8.1-4. A patched version of the package is available...
CVE-2026-25680 affecting package containerd2 for versions less than 2.2.4-4
CVE-2026-25680 affecting package containerd2 for versions less than 2.2.4-4. A patched version of the package is available...
CVE-2026-56113 affecting package dhcpcd for versions less than 10.0.8-4
CVE-2026-56113 affecting package dhcpcd for versions less than 10.0.8-4. A patched version of the package is available...