11578 matches found
CLEANSTART-2026-RX05059 Security fixes in openbao-fips 2.1.1-r11
Package openbao-fips version 2.1.1-r11 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...
CLEANSTART-2026-BR47007 Security fixes in syft 1.42.4-r0
Package syft version 1.42.4-r0 fixes 11 vulnerabilities: CVE-2026-34165, CVE-2026-33762, CVE-2026-34986, CVE-2026-4660, CVE-2026-39883...
CLEANSTART-2026-EB73776 Security fixes in kyverno-policy-reporter-fips 3.4.2-r6
Package kyverno-policy-reporter-fips version 3.4.2-r6 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...
CLEANSTART-2026-QY30307 Security fixes in redis 7.2.11-r0
Package redis version 7.2.11-r0 fixes 4 vulnerabilities: CVE-2025-49844, CVE-2025-46817, CVE-2025-46818, CVE-2025-46819...
CLEANSTART-2026-IV87703 Security fixes in elastic-beats 8.19.15-r2
Package elastic-beats version 8.19.15-r2 fixes 11 vulnerabilities: CVE-2026-39817, CVE-2026-39820, CVE-2026-39826, CVE-2026-39823, CVE-2026-42499...
CLEANSTART-2026-SD41440 Security fixes in velero-fips 1.18.0-r3
Package velero-fips version 1.18.0-r3 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811...
CLEANSTART-2026-IG38544 Security fixes in curl 8.11.0-r0
Package curl version 8.11.0-r0 fixes 1 vulnerabilities: CVE-2024-9681...
CLEANSTART-2026-TN70963 Security fixes in metacontroller 4.14.0-r1
Package metacontroller version 4.14.0-r1 fixes 11 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821...
CVE-2026-13143 WP Travel < 11.8.1 - Unauthenticated Payment Bypass via Forged PayPal IPN
The WP Travel WordPress plugin before 11.8.1 does not verify PayPal Instant Payment Notifications through the PayPal post-back handshake before marking a booking paid, allowing unauthenticated attackers to forge a notification that flips an arbitrary pending booking to a paid and booked state at ...
LeakNet Claims 11TB of Data Stolen in NYC Health + Hospitals Breach
LeakNet claims it stole 11TB of NYC Health + Hospitals data containing sensitive medical, financial and biometric records linked to more than 12 million people...
PT-2026-66534
Name of the Vulnerable Software and Affected Versions IBM Db2 versions 11.5.0 through 11.5.9 IBM Db2 versions 12.1.0 through 12.1.4 Description A buffer overflow exists in the setgid helper db2flacc. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than th...
PT-2026-66593
Name of the Vulnerable Software and Affected Versions GoAccess versions prior to 1.11 Description The built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum frame size. This allows an unauthenticated remote...
JLSEC-2026-811 A malicious EXR file can trigger undefined behavior in OpenEXR
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, readVariableLengthInteger decodes a variable-length integer fro...
CVE-2026-65943
Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI 9.11.0...
CVE-2026-65944
Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI 9.11.0...
CVE-2026-65944 Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI < 9.11.0
Joomla Extension - rolandd.com - CSRF vectors in AJAX endpoint handlers RO CSVI 9.11.0...
EUVD-2026-50308
Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI 9.11.0...
CVE-2026-65943 Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI < 9.11.0
Joomla Extension - rolandd.com - Unauthenticated directory creation RO CSVI 9.11.0...
CVE-2026-65946
The Joomla Extension - rolandd.com software (specifically RO CSVI ) versions prior to 9.11.0 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation within the AJAX endpoint handlers . This vulnerability could allow an attack...