GHSA-4MP9-239F-G9HG vulnerabilities

Vulnerabilities for packages: kafbat-ui, opensearch-fips, infinispan, knative-kafka-broker, elasticsearch, metabase, kayenta-fips, apache-activemq-artemis, kafka-bridge, traccar-fips, apache-nifi, floci-az, zipkin, management-api-for-apache-cassandra-5.0, tinkerpop, flyway-fips,...

GHSA-6CQP-G7GG-8HR5 vulnerabilities

Vulnerabilities for packages: kafbat-ui, opensearch-fips, infinispan, knative-kafka-broker, elasticsearch, metabase, kayenta-fips, apache-activemq-artemis, kafka-bridge, traccar-fips, apache-nifi, floci-az, zipkin, management-api-for-apache-cassandra-5.0, tinkerpop, flyway-fips,...

GHSA-Q4F6-JM68-57WW vulnerabilities

Vulnerabilities for packages: kafbat-ui, opensearch-fips, infinispan, knative-kafka-broker, elasticsearch, metabase, kayenta-fips, apache-activemq-artemis, kafka-bridge, traccar-fips, apache-nifi, floci-az, zipkin, management-api-for-apache-cassandra-5.0, tinkerpop, flyway-fips,...

GHSA-G7HG-VRCF-MVMR vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, thingsboard, tez, cassandra...

GHSA-WC96-39FC-566F vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, thingsboard, tez, cassandra...

DEBIAN-CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

CVE-2026-13077

creationtimestamp| type| source ---|---|--- 2026-07-24 04:46:03+00:00| seen| https://www.hkcert.org/security-bulletin/mongodb-multiple-vulnerabilities20260724...

CVE-2026-66141

Exim before 4.99.5 allows .forward privilege escalation because forcecommand for a pipe transport is mishandled...

CVE-2026-66140

Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled...

GHSA-35RM-7J9C-2F7M vulnerabilities

Vulnerabilities for packages: zed...

GHSA-89XV-2M56-2M9X vulnerabilities

Vulnerabilities for packages: homepage, langfuse-fips, keep, langfuse, peerdb-ui, jitsucom-jitsu, keep-fips...

GHSA-Q8WF-6R8G-63CH vulnerabilities

Vulnerabilities for packages: homepage, langfuse-fips, keep, langfuse, peerdb-ui, jitsucom-jitsu, keep-fips...

GHSA-4633-3J49-MH5Q vulnerabilities

Vulnerabilities for packages: homepage, langfuse-fips, keep, langfuse, peerdb-ui, jitsucom-jitsu, keep-fips...

GHSA-4C39-4CCG-62R3 vulnerabilities

Vulnerabilities for packages: homepage, langfuse-fips, keep, langfuse, peerdb-ui, jitsucom-jitsu, keep-fips...

GHSA-W62V-XXXG-MG59 vulnerabilities

Vulnerabilities for packages: langfuse-fips, wazuh-dashboard-fips, commercial-gitlab-rails-ee-fips, wazuh-dashboard, commercial-gitlab-rails-ee, langfuse, librechat...

GHSA-XGM2-5F3F-MVVC vulnerabilities

Vulnerabilities for packages: langfuse-fips, wazuh-dashboard-fips, commercial-gitlab-rails-ee-fips, wazuh-dashboard, commercial-gitlab-rails-ee, langfuse, librechat...

GHSA-35RM-7J9C-2F7M vulnerabilities

Vulnerabilities for packages: zed...

GHSA-PG7V-JWJ7-P798 vulnerabilities

Vulnerabilities for packages: mlflow, superset, open-webui...

📄 SIP Sustainable Irrigation Platform 5.x Cross Site Scripting

SIP Sustainable Irrigation Platform version 5.x stores program names supplied through HTTP requests and later renders them into its web pages without proper output encoding. This can be exploited to execute arbitrary JavaScript in the browser of any user who views the affected pages by creating a...

SUSE SLES15: GraphicsMagick / GraphicsMagick-devel / libGraphicsMagick++-Q16-12 / etc (SUSE-SU-2026:3201-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:3201-1 advisory. This update for GraphicsMagick fixes the following issue - CVE-2026-61870: Memory leak in VIFF encoder when allocation fails bsc1271293. Tenable has...