CVE-2026-33662 OP-TEE: RSASSA EMSA- PKCS1-v1_5 underflow in emsa_pkcs1_v1_5_encode()

OP-TEE is a Trusted Execution Environment TEE designed as companion to a non-secure Linux kernel running on Arm; Cortex-A cores using the TrustZone technology. From 3.8.0 to 4.10, in the function emsapkcs1v15encode in core/drivers/crypto/cryptoapi/acipher/rsassa.c, the amount of padding needed, "...

CVE-2026-40164 affecting package jq for versions less than 1.7.1-5

CVE-2026-40164 affecting package jq for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-33948 affecting package jq for versions less than 1.7.1-5

CVE-2026-33948 affecting package jq for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-32316 affecting package jq for versions less than 1.7.1-5

CVE-2026-32316 affecting package jq for versions less than 1.7.1-5. A patched version of the package is available...

CVE-2026-33947 affecting package jq for versions less than 1.7.1-5

CVE-2026-33947 affecting package jq for versions less than 1.7.1-5. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2025-54510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A missing lock verification in AMD Secure Processor ASP firmware may permit a locally authenticated attacker with administrative privileges to alter MMIO routin...

Debian dsa-6219 : python-pil-doc - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6219 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6219-1 [email protected] https://www.debian.org/security/ Moritz...

Important Photon OS Security Update - PHSA-2026-5.0-0827

Updates of 'jq', 'python3-ujson' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2026-40959

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod. CVE-2026-40959 Note that Nessus relies on the presence of the packag...

PT-2026-37184

Name of the Vulnerable Software and Affected Versions Saltcorn versions prior to 1.4.6 Saltcorn versions prior to 1.5.6 Saltcorn versions prior to 1.6.0-beta.5 Description Saltcorn fails to properly validate the dest parameter during the post-login process. The is relative url function only block...

goshs has an empty-username SFTP password authentication bypass

Summary goshs contains an SFTP authentication bypass when the documented empty-username basic-auth syntax is used. If the server is started with -b ':pass' together with -sftp, goshs accepts that configuration but does not install any SFTP password handler. As a result, an unauthenticated network...

📄 Redaxo 5.20.1 Path Traversal

Redaxo versions 5.20.1 and below suffer from a path traversal vulnerability. CVE-2026-21857: Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read Overview | Field | Details | |---|---| | CVE ID | CVE-2026-21857 | | Severity | HIGH | | Advisory | View Advisory | | Discovered by...

CVE-2026-32778 affecting package expat for versions less than 2.6.4-5

CVE-2026-32778 affecting package expat for versions less than 2.6.4-5. A patched version of the package is available...

CVE-2026-5201 affecting package gdk-pixbuf2 for versions less than 2.42.10-5

CVE-2026-5201 affecting package gdk-pixbuf2 for versions less than 2.42.10-5. A patched version of the package is available...

CVE-2026-32776 affecting package expat for versions less than 2.6.4-5

CVE-2026-32776 affecting package expat for versions less than 2.6.4-5. A patched version of the package is available...

CVE-2026-32777 affecting package expat for versions less than 2.6.4-5

CVE-2026-32777 affecting package expat for versions less than 2.6.4-5. A patched version of the package is available...

CVE-2026-34781 Electron crashes in clipboard.readImage() on malformed clipboard image data

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5, apps that call clipboard.readImage may be vulnerable to a denial of service. If the system clipboard contains image data that fails to decod...

CVE-2026-34765 Electron named window.open targets not scoped to the opener's browsing context

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.5, 40.8.5, 41.1.0, and 42.0.0-alpha.5, when a renderer calls window.open with a target name, Electron did not correctly scope the named-window lookup to the opener's browsing...

CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-5

CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-5. A patched version of the package is available...

CVE-2026-34456

Reviactyl is an open-source game server management panel built using Laravel, React, FilamentPHP, Vite, and Go. From version 26.2.0-beta.1 to before version 26.2.0-beta.5, a vulnerability in the OAuth authentication flow allowed automatic linking of social accounts based solely on matching email...