94636 matches found
OPENSUSE-SU-2026:21551-1 Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260727T201416 2026-07-27T20:14:16Z jscPED-11136: Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-5046 CVE-2026-46385 GHSA-w8j3-pq8g-8m7w GO-2026-5047 CVE-2026-46384 GHSA-mc57-h6j3-3hmv...
SUSE-SU-2026:23227-1 Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260727T201416 2026-07-27T20:14:16Z jscPED-11136: Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-5046 CVE-2026-46385 GHSA-w8j3-pq8g-8m7w GO-2026-5047 CVE-2026-46384 GHSA-mc57-h6j3-3hmv...
SUSE-SU-2026:23216-1 Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20260727T201416 2026-07-27T20:14:16Z jscPED-11136: Go CVE Numbering Authority IDs added or updated with aliases: GO-2026-5046 CVE-2026-46385 GHSA-w8j3-pq8g-8m7w GO-2026-5047 CVE-2026-46384 GHSA-mc57-h6j3-3hmv...
CVE-2026-72733
Dokploy (PaaS) shows a critical OS command injection in the backup/restore flow. Prior to 0.29.13, the tRPC backup.restoreBackupWithLogs path builds shell commands by interpolating user-controlled databaseName and backupFile into restore commands and rclone paths, allowing an authenticated user w...
CLSA-2026-1786373168 TuxCare security update for mysql2 (1 CVE)
TuxCare rebuilt mysql2 to address 1 CVE. Fixed in 2.3.3-tuxcare.5...
CVE-2026-63106 ReadyEcommerce < 4.5.2 Unauthenticated SQL Injection via ProductController.php
ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterization in ProductController.php. Attackers can perform...
CVE-2026-63106
ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterization in ProductController.php. Attackers can perform...
CVE-2023-30308
creationtimestamp| type| source ---|---|--- 2026-08-10 13:31:31+00:00| seen| https://vulnerability.circl.lu/bundle/6e833a25-b741-4cf7-9e48-1ecedcde12c9...
EUVD-2026-55497
In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix source list corruption on a failed replace When replacing the source list of an MDB remote entry, all existing sources are first marked for deletion and vxlanmdbremotesrcsadd is then called to add the new source...
CVE-2026-68116 vxlan: mdb: Fix source list corruption on a failed replace
In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix source list corruption on a failed replace When replacing the source list of an MDB remote entry, all existing sources are first marked for deletion and vxlanmdbremotesrcsadd is then called to add the new source...
CVE-2026-42537
Remote Code Execution via JDBC URL Injection in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...
DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute
A flaw was found in the DBI component for Perl. This vulnerability allows an attacker to inject and execute arbitrary code by manipulating the Profile attribute of a DBI handle. When a string is assigned to this attribute, the component processes it without proper validation, enabling the executi...
DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders
A flaw was found in DBI for Perl. This vulnerability, a heap overflow, occurs when the software attempts to preparse SQL statements containing an extremely large number of placeholders. This could allow a remote attacker to cause a denial of service or potentially execute arbitrary code...
CVE-2026-72589 alseambusher crontab-ui - Unauthenticated RCE via Shell Injection in Imported Database hook Field
An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file. The POST /import endpoint accepts arbitrary .db files and overwrites the application database...
CVE-2026-72589
An OS command injection vulnerability affects alseambusher/crontab-ui up to version 0.4.2. An unauthenticated remote attacker can trigger arbitrary system commands by importing a crafted crontab database file via POST /import, which accepts arbitrary .db files and overwrites the application datab...
CVE-2026-72589
An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file. The POST /import endpoint accepts arbitrary .db files and overwrites the application database...
CVE-2026-72589 alseambusher crontab-ui - Unauthenticated RCE via Shell Injection in Imported Database hook Field
An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file. The POST /import endpoint accepts arbitrary .db files and overwrites the application database...
CVE-2026-72589 alseambusher crontab-ui - Unauthenticated RCE via Shell Injection in Imported Database hook Field
An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file. The POST /import endpoint accepts arbitrary .db files and overwrites the application database...
CVE-2026-42537 Apache Ranger: Remote Code Execution via JDBC URL Injection
Remote Code Execution via JDBC URL Injection in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...