13126 matches found
CLSA-2026-1780274971 TuxCare security update for 6 packages (2 CVEs)
TuxCare rebuilt 6 packages to address 2 CVEs. Fixed in 23.2.1-tuxcare.1...
CLSA-2026-1775176191 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 19 @angular packages to address 1 CVE. Fixed in 6.1.10-tuxcare.6...
CLSA-2026-1775003162 TuxCare security update for nodemailer (1 CVE)
TuxCare rebuilt nodemailer to address 1 CVE. Fixed in 6.10.1-tuxcare.1...
CLSA-2026-1770595754 TuxCare security update for 35 packages (2 CVEs)
TuxCare rebuilt 35 packages to address 2 CVEs. Fixed in 8.5.100-tuxcare.6...
CLSA-2025-1748390600 TuxCare security update for org.springframework.boot (1 CVE)
TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18.tuxcare.6...
Oracle Linux 10 : nodejs-nodemon (ELSA-2026-48032)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-48032 advisory. 3.1.14-2 - Regenerete sources. 3.1.14-1 - Update to version 3.1.14 3.0.3-7 - revert of ce0df1a 3.0.3-6 - deps: revert letting nodemon work with any node Tenab...
CVE-2026-56852 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-6
CVE-2026-56852 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-6. A patched version of the package is available...
CVE-2026-56852 affecting package containerd2 for versions less than 2.2.4-6
CVE-2026-56852 affecting package containerd2 for versions less than 2.2.4-6. A patched version of the package is available...
CVE-2026-56852 affecting package kured for versions less than 1.15.0-6
CVE-2026-56852 affecting package kured for versions less than 1.15.0-6. A patched version of the package is available...
CVE-2026-64726
The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker in physical proximity may be able to corrupt process memory...
CVE-2026-61511
vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5TemplateRuntime::runMaths method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code by supplying crafted input through the pagenavpagenumber...
CVE-2026-66008
Parse Server versions >= 9.0.0 before 9.10.0-alpha.6 and >= 8.2.2 before 8.6.87 expose Pointer and Relation target class names through GraphQL validation and input-coercion error messages when public schema introspection is disabled (graphQLPublicIntrospection: false). Since errors are prod...
CVE-2026-15739 Rich Showcase for Google Reviews <= 6.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pagination' Shortcode Attribute
The Rich Showcase for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'pagination' Shortcode Attribute in all versions up to, and including, 6.9.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
Plone Volto < 16.34.1 / 17.x < 17.22.2 / 18.x < 18.27.2 / 19.0.0-alpha.1 < 19.0.0-alpha.6 DoS
The version of the @plone/volto Node.js Package installed on the remote host is prior to 16.34.1, or 17.x prior to 17.22.2, or 18.x prior to 18.27.2, or 19.0.0-alpha.1 prior to 19.0.0-alpha.6. It is, therefore, affected by a denial of service vulnerability. An unauthenticated, remote attacker, ca...
CVE-2026-45799
The CVE-2026-45799 issue affects com.squareup.wire:wire-runtime (and related artifacts) where ByteArrayProtoReader32.skipGroup() and ProtoReader.skipGroup() fail to reject negative LENGTH_DELIMITED lengths before skip(). A crafted protobuf varint of -128 can drive the internal position negative, ...
CVE-2026-42502 affecting package cni-plugins for versions less than 1.4.0-6
CVE-2026-42502 affecting package cni-plugins for versions less than 1.4.0-6. A patched version of the package is available...
CVE-2026-42506 affecting package cni-plugins for versions less than 1.4.0-6
CVE-2026-42506 affecting package cni-plugins for versions less than 1.4.0-6. A patched version of the package is available...
CVE-2026-53094 affecting package kernel for versions less than 6.6.143.1-1
CVE-2026-53094 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...