1038483 matches found
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.3 security update
Red Hat Advanced Cluster Management for Kubernetes v2.16 general availability release images, which provide security fixes, bug fixes, and updated container images. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS...
EUVD-2026-62700
Wekan is open source kanban built with Meteor. From 9.57 until 9.74, the /api/boards/:boardId/exportExcel route in models/exportExcel.js called the asynchronous exporterExcel.canExportuser authorization guard from models/server/ExporterExcel.js without awaiting it. The returned Promise was always...
MINI-VX3C-F32V-GJ35
Bulletin has no description...
MINI-6CF3-RGM4-XRGF
Bulletin has no description...
MINI-J8R2-5HVC-369Q
Bulletin has no description...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-8962: RHODF 4.20.17 release DFBUGS-8003: GSS Rook Ceph metrics are not being scraped, and the...
MINI-WCP9-24P8-QWC2
Bulletin has no description...
Important: Red Hat Security Advisory: OpenShift Container Platform 4.19.43 bug fix and security update
Red Hat OpenShift Container Platform release 4.19.43 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.19. Red Hat Product Security has rated this update as having a...
CVE-2026-76234
libcrux-ecdh (before 0.0.6) had broken X25519 length/clamping validation; libcrux-ed25519 (before 0.0.6) duplicated clamping during key generation; libcrux-psq (before 0.0.7) panicked instead of propagating AEADError. CVSS 3.1 scores availability impact HIGH (7.5) and CVSS 4.0 scores 8.7. No expl...
EUVD-2026-62475
libcrux-ecdh and libcrux-ed25519 before 0.0.6, and libcrux-psq before 0.0.7, contain cryptographic implementation bugs. libcrux-ecdh did not properly check length and clamping during X25519 secret validation and had a broken clamping check for imported X25519 secret keys; libcrux-ed25519 performe...
MINI-7H9W-HFFW-HC8X
Bulletin has no description...
MINI-GFP8-WV3X-9VVP
Bulletin has no description...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9563: Backport to odf-4.21.10 Race condition may allow multiple CephCluster reconciles in parallel...
RHSA-2026:56007 Red Hat Security Advisory: mysql8.4 security, bug fix, and enhancement update
Bulletin has no description...
RHBA-2025:5321 Red Hat Bug Fix Advisory: mysql8.4 bug fix and enhancement update
Bulletin has no description...
RHBA-2024:2413 Red Hat Bug Fix Advisory: glibc bug fix and enhancement update
Bulletin has no description...
NeDi 1.9C - Cross-Site Scripting
NeDi 1.9C is vulnerable to cross-site scripting because of an incorrect implementation of sanitize in inc/libmisc.php. This function attempts to escape the SCRIPT tag from user-controllable values, but can be easily bypassed, as demonstrated by an onerror attribute of an IMG element as a...
NexusDB <4.50.23 - Local File Inclusion
NexusQA NexusDB before 4.50.23 allows the reading of files via ../ directory traversal and local file inclusion. id: CVE-2020-24571 info: name: NexusDB 4.50.23 - Local File Inclusion author: pikpikcu severity: high description: NexusQA NexusDB before 4.50.23 allows the reading of files via ../...
MajorDoMo - Unauthenticated RCE
MajorDoMo contains a remote code execution caused by an include order bug and lack of exit after redirect in admin panel's PHP console, letting unauthenticated attackers execute arbitrary PHP code via crafted GET requests. id: CVE-2026-27174 info: name: MajorDoMo - Unauthenticated RCE author:...
