openSUSE 16 Security Update : python-Django (openSUSE-SU-2026:21313-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21313-1 advisory. Changes in python-Django: - CVE-2026-48588: Potential exposure of private data via cached Set-Cookie response bsc1271029 - CVE-2026-53877: Heap...

PT-2026-58471

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Protocol affected versions not specified Description An off-by-one error occurs in the Remote Desktop Protocol, which allows an unauthorized attacker to disclose sensitive information over a network and affect the system...

PT-2026-58652

Name of the Vulnerable Software and Affected Versions Windows RDP affected versions not specified Description An out-of-bounds read occurs in Windows RDP, which allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information...

PT-2026-58199

Name of the Vulnerable Software and Affected Versions Windows Trusted Runtime Interface Driver affected versions not specified Description An authorized attacker can locally disclose sensitive information due to an exposure of sensitive data within the Windows Trusted Runtime Interface Driver...

PT-2026-58069

Name of the Vulnerable Software and Affected Versions Easy!Appointments versions prior to 1.6.0 Description An issue exists where the Google::oauth function at application/controllers/Google.php:278 stores a URL-supplied provider id in the session. Subsequently, the oauth callback function saves...

PT-2026-58073

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 5.0.0 through 5.0.2 FortiSandbox versions 4.4.3 through 4.4.8 Description An exposure of resource to wrong sphere issue allows an unauthenticated attacker to access the VNC server of virtual machines performing malware...

PT-2026-58114

Name of the Vulnerable Software and Affected Versions Windows File Explorer affected versions not specified Description An authorized attacker can locally disclose sensitive information due to an exposure of sensitive information to an unauthorized actor within Windows File Explorer...

PT-2026-58926

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.9.1 and 8.6.83, a LiveQuery subscriber could receive object field values they were not authorized to read when a single save changed both an object field and the subscriber's ACL rea...

PT-2026-58631

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally. This issue enables attackers to gain...

Unauthenticated VNC access exposed on all interfaces

...

PT-2026-60097

Name of the Vulnerable Software and Affected Versions nebula-mesh affected versions not specified Description The web handler renderMobileBundle passes a pki.CAResolver to the mobilebundle.Build function, which decrypts the CA's ed25519 private key into a pki.CAManager. However, the Build functio...

PT-2026-58395

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An issue in Windows Win32K allows an authorized attacker to locally disclose sensitive information to an unauthorized actor, which can affect the system. Recommendations At the moment,...

PT-2026-60883

Name of the Vulnerable Software and Affected Versions Microsoft Windows RDP affected versions not specified Microsoft Server Remote Desktop Web Client affected versions not specified Description An issue in Windows RDP and the Server Remote Desktop Web Client allows an unauthorized actor to...

Adobe Media Encoder < 25.6.6 / 26.0.0 < 26.3.0 Multiple Vulnerabilities (APSB26-72)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 25.6.6, 26.3.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-72 advisory. - Media Encoder is affected by an out-of-bounds write vulnerability that could result in arbitrary co...

Adobe Audition < 25.6.6 / 26.0 < 26.3 Multiple Vulnerabilities (APSB26-71)

The version of Adobe Audition installed on the remote Windows host is prior to 25.6.6, 26.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-71 advisory. - Audition is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution...

PT-2026-58247

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...

PT-2026-58182

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue in the Windows Kernel allows a local unauthorized attacker to disclose sensitive system information to an unauthorized control sphere. Recommendations At the moment, there is ...

PT-2026-58070

Name of the Vulnerable Software and Affected Versions Easy!Appointments versions prior to 1.6.0 Description An excessive data exposure issue in the customers search endpoint allows an authenticated user to obtain appointment hashes belonging to other users. An attacker can use these hashes to...

PT-2026-60084

Auth0 Symfony is a Symfony SDK for Auth0 Authentication and Management APIs. From 5.0.0-BETA0 until 5.9.0, the Authorizer::authenticate and Authorizer::supports paths in the Authorizer security authenticator may accept OAuth 2.0 bearer access tokens from the token URL query parameter as well as t...

PT-2026-58388

Name of the Vulnerable Software and Affected Versions Windows Overlay Filter affected versions not specified Description An issue in the Windows Overlay Filter allows an authorized local attacker to disclose sensitive information. This flaw enables local users to access data that should be...