12982 matches found
Intel® Processor Firmware Advisory - 01435
Summary: A potential security vulnerability in some Intel® Processors may allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20716 Description: Improper access control for some Intel® Processors with...
HPESBHF05096 rev.1 - HPE ProLiant DL/ML/XD, Alletra and Synergy Server Using Certain Intel Processors, INTEL-SA-01379, Intel Xeon 6 Processor Firmware Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to 1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to v1.8005-29-20...
Intel® Xeon® 6 Processor Firmware Advisory
Summary: A potential security vulnerability for some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions Intel® TDX may allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31936 Description:...
CLSA-2026-1785554485 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.1.6-tuxcare.6...
CLSA-2026-1781744128 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 6.1.20-tuxcare.6...
CLSA-2026-1770595754 TuxCare security update for 35 packages (2 CVEs)
TuxCare rebuilt 35 packages to address 2 CVEs. Fixed in 8.5.100-tuxcare.6...
Oracle Linux 10 : nodejs-nodemon (ELSA-2026-48032)
The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-48032 advisory. 3.1.14-2 - Regenerete sources. 3.1.14-1 - Update to version 3.1.14 3.0.3-7 - revert of ce0df1a 3.0.3-6 - deps: revert letting nodemon work with any node Tenab...
CVE-2026-56852 affecting package containerd2 for versions less than 2.2.4-6
CVE-2026-56852 affecting package containerd2 for versions less than 2.2.4-6. A patched version of the package is available...
CVE-2026-56852 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-6
CVE-2026-56852 affecting package application-gateway-kubernetes-ingress for versions less than 1.7.7-6. A patched version of the package is available...
CVE-2026-56852 affecting package kured for versions less than 1.15.0-6
CVE-2026-56852 affecting package kured for versions less than 1.15.0-6. A patched version of the package is available...
CVE-2026-64726
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. An attacker in physical proximity may be able to corrupt process memory...
CVE-2026-61511
vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5TemplateRuntime::runMaths method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code by supplying crafted input through the pagenavpagenumber...
CVE-2026-66008
Parse Server versions >= 9.0.0 before 9.10.0-alpha.6 and >= 8.2.2 before 8.6.87 expose Pointer and Relation target class names through GraphQL validation and input-coercion error messages when public schema introspection is disabled (graphQLPublicIntrospection: false). Since errors are prod...
Plone Volto < 16.34.1 / 17.x < 17.22.2 / 18.x < 18.27.2 / 19.0.0-alpha.1 < 19.0.0-alpha.6 DoS
The version of the @plone/volto Node.js Package installed on the remote host is prior to 16.34.1, or 17.x prior to 17.22.2, or 18.x prior to 18.27.2, or 19.0.0-alpha.1 prior to 19.0.0-alpha.6. It is, therefore, affected by a denial of service vulnerability. An unauthenticated, remote attacker, ca...
CVE-2026-45799
The CVE-2026-45799 issue affects com.squareup.wire:wire-runtime (and related artifacts) where ByteArrayProtoReader32.skipGroup() and ProtoReader.skipGroup() fail to reject negative LENGTH_DELIMITED lengths before skip(). A crafted protobuf varint of -128 can drive the internal position negative, ...
CVE-2026-42506 affecting package cni-plugins for versions less than 1.4.0-6
CVE-2026-42506 affecting package cni-plugins for versions less than 1.4.0-6. A patched version of the package is available...
CVE-2026-42502 affecting package cni-plugins for versions less than 1.4.0-6
CVE-2026-42502 affecting package cni-plugins for versions less than 1.4.0-6. A patched version of the package is available...
CVE-2026-53094 affecting package kernel for versions less than 6.6.143.1-1
CVE-2026-53094 affecting package kernel for versions less than 6.6.143.1-1. An upgraded version of the package is available that resolves this issue...