10396 matches found
TencentOS Server 4: vim (TSSA-2026:0573)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0573 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2026-42506 affecting package dasel for versions less than 2.8.1-4
CVE-2026-42506 affecting package dasel for versions less than 2.8.1-4. A patched version of the package is available...
CVE-2025-15661 affecting package libssh2 for versions less than 1.11.1-4
CVE-2025-15661 affecting package libssh2 for versions less than 1.11.1-4. A patched version of the package is available...
CVE-2026-42502 affecting package dasel for versions less than 2.8.1-4
CVE-2026-42502 affecting package dasel for versions less than 2.8.1-4. A patched version of the package is available...
CVE-2026-25681 affecting package containerd2 for versions less than 2.2.4-4
CVE-2026-25681 affecting package containerd2 for versions less than 2.2.4-4. A patched version of the package is available...
CVE-2026-25680 affecting package dasel for versions less than 2.8.1-4
CVE-2026-25680 affecting package dasel for versions less than 2.8.1-4. A patched version of the package is available...
CVE-2026-27136 affecting package dasel for versions less than 2.8.1-4
CVE-2026-27136 affecting package dasel for versions less than 2.8.1-4. A patched version of the package is available...
CVE-2026-42502 affecting package containerd2 for versions less than 2.2.4-4
CVE-2026-42502 affecting package containerd2 for versions less than 2.2.4-4. A patched version of the package is available...
CVE-2026-25680 affecting package containerd2 for versions less than 2.2.4-4
CVE-2026-25680 affecting package containerd2 for versions less than 2.2.4-4. A patched version of the package is available...
CVE-2026-56113 affecting package dhcpcd for versions less than 10.0.8-4
CVE-2026-56113 affecting package dhcpcd for versions less than 10.0.8-4. A patched version of the package is available...
CVE-2026-14258 affecting package dhcpcd for versions less than 10.0.8-4
CVE-2026-14258 affecting package dhcpcd for versions less than 10.0.8-4. A patched version of the package is available...
CVE-2026-58058 affecting package nmap for versions less than 7.95-4
CVE-2026-58058 affecting package nmap for versions less than 7.95-4. A patched version of the package is available...
CVE-2026-10698
CVE-2026-10698 is an Improper Neutralization of Special Elements in Data Query Logic vulnerability in Progress MOVEit Transfer, specifically affecting the Custom Reports module . Affected versions are MOVEit Transfer 2025.0.0–before 2025.0.8, 2025.1.0–before 2025.1.4, and 2026.0.0–before 2026.0.1...
PT-2026-56857
Name of the Vulnerable Software and Affected Versions OpenEXR versions prior to 3.2.10 OpenEXR versions prior to 3.3.12 OpenEXR versions prior to 3.4.13 Description A heap out-of-bounds write exists in the Imf 4 0::SampleCountChannel::setint r, unsigned int newNumSamples function. The row-based...
GHSA-86J7-9J95-VPQJ Better Auth has stored XSS in the auth-server origin via javascript: redirect_uri in oidc-provider and mcp
Am I affected? Check each condition. Users are affected when all of the first three hold. - Their application enables the oidc-provider plugin or the mcp plugin from better-auth/plugins. The mcp plugin wraps the same provider and carries the same defect. Both are on the migration path to...
GHSA-P2FR-6HMX-4528 @better-auth/oauth-provider may provide access tokens for unauthorized audiences via unbound resource indicators
Am I affected? Users are affected if all of the following hold: - Their application depends on @better-auth/oauth-provider on any stable 1.6.x release the stable line is not patched or on a pre-release before 1.7.0-beta.4. - Their application either configures validAudiences with more than one...
PYSEC-2026-1771 pgAdmin 4 vulnerable to directory traversal
pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user's settings or alter the database...
PYSEC-2026-894 pgAdmin 4 Open Redirect vulnerability
Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL...
DEBIAN-CVE-2026-41515
OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. Starting in version 3.9.0 and prior to version 4.11.0, the RSA-OAEP decryption implementation in the NXP CAAM crypto driver uses...
