203764 matches found
Photon OS 5.0: Linux PHSA-2026-5.0-0926
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0926. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
GHSA-8QQM-FP2Q-V734
creationtimestamp| type| source ---|---|--- 2026-07-23 23:59:46+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mre2ahctmm2e...
CVE-2026-16396
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in WebExtensions...
CVE-2026-15718
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...
CVE-2026-16368
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript: WebAssembly component...
CVE-2026-16357
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the Graphics component...
DEBIAN-CVE-2026-16804
Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-16764 OWASP DefectDojo API/Web serializers.py UserSerializer privileges management
A vulnerability was identified in OWASP DefectDojo 2.59.0. This issue affects the function UserSerializer of the file dojo/apiv2/serializers.py of the component API/Web. Such manipulation of the argument isstaff leads to improper privilege management. The attack may be performed from remote. The...
OPENSUSE-SU-2026:21432-1 Security update for gh
This update for gh fixes the following issues: Changes in gh: - CVE-2026-39821: reject all-ASCII xn-- Punycode labels in the vendored golang.org/x/net/idna package regardless of Go's unicode.Version boo1266618...
EUVD-2026-48428
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to cause a memory corruption via a Read Request...
GHSA-R7WM-3CXJ-WFF9 vulnerabilities
Vulnerabilities for packages: scala, tez, apache-nifi, flyway, spark, opensearch, dependency-track, logstash, druid, infinispan, apache-nifi-registry, akhq, cass-config-builder, trino, sonarqube, gradle, spdx-tools-java, keycloak-config-cli, apache-tika, wildfly, apicurio-registry,...
aana (>=0.2.1, <=0.2.2), abgrouponline (>=1.0.0, <=1.0.2) +563 more potentially affected by CVE-2026-65920 via diffusers (>=0.2.4, <=0.40.0)
diffusers PYPI version =0.2.4, =0.2.1, =1.0.0, =0.1.1, =0.2.1, =20260210.0.0, =0.2.14, =0.1.2, =0.0.1, =0.0.3, =0.10.6, =0.0.1, =0.0.1, =1.8.20, =1.19.0 and more Source cves: CVE-2026-65920 Source advisory: SNYK:PYTHON-DIFFUSERS-18313062...
Open Redirect
Overview Affected versions of this package are vulnerable to Open Redirect via the navigation mechanisms when attacker-supplied paths containing a backslash are processed. An attacker can redirect users to unintended external sites by crafting malicious links or inputs. Remediation Upgrade...
CVE-2026-62565
creationtimestamp| type| source ---|---|--- 2026-07-23 18:21:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-61325
creationtimestamp| type| source ---|---|--- 2026-07-23 18:19:17+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-61311
creationtimestamp| type| source ---|---|--- 2026-07-23 18:19:02+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-08-01 09:32:55+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mrz5yqdmbb2b 2026-08-01 09:33:08+00:00| seen|...
CVE-2026-61267
creationtimestamp| type| source ---|---|--- 2026-07-23 18:18:37+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-61210
creationtimestamp| type| source ---|---|--- 2026-07-23 18:17:43+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...
CVE-2026-61185
creationtimestamp| type| source ---|---|--- 2026-07-23 18:17:13+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-08-01 09:27:20+00:00| seen| https://bsky.app/profile/khesefxyz.bsky.social/post/3mrz5opzvvy2c 2026-08-01 09:27:20+00:00| seen|...