137169 matches found
Exploit for Improper Access Control in Jishenghua Jsherp
jshERP /user/info IDOR — VulDB submission package This repo...
CVE-2026-52691
The Apache Griffin Hive Metastore Module is vulnerable to an SQL Injection vulnerability across all versions . The root cause involves the improper neutralization of special elements used in SQL commands. Because the project is retired, the maintainers do not plan to release a fix. Impacted users...
CLSA-2026-1788527318 TuxCare security update for com.mchange:c3p0 (1 CVE)
TuxCare rebuilt com.mchange:c3p0 to address 1 CVE. Fixed in 0.9.5.4-tuxcare.3...
CLSA-2026-1788524250 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 2 CVEs. Fixed in 6.0.11-tuxcare.3...
CLSA-2026-1788522007 TuxCare security update for nuxt (1 CVE)
TuxCare rebuilt nuxt to address 1 CVE. Fixed in 3.12.3-tuxcare.8...
RHSA-2026:63165 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:63164 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:63137 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:63151 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
Bulletin has no description...
RHSA-2026:63129 Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Bulletin has no description...
CLSA-2026-1788513712 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 26 org.springframework packages to address 2 CVEs. Fixed in 6.1.4-tuxcare.4...
CLSA-2026-1788512070 TuxCare security update for transformers (1 CVE)
TuxCare rebuilt transformers to address 1 CVE. Fixed in 4.57.6.post4+tuxcare...
selinux: do not cancel a policy conversion that never started
...
ring-buffer: Fix crash passing ERR_PTR to kthread_stop()
...
CVE-2025-15691
The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before creating accounts from opt-in form submissions, relying on a value supplied in the request instead, allowing unauthenticated attackers to create WordPress user accounts even when...
CVE-2026-85229 Apache SkyWalking: CWE-79 stored XSS in Booster UI dashboard widgets (incomplete fix of CVE-2025-54057)
UNSUPPORTED WHEN ASSIGNED Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache SkyWalking Booster UI. This issue affects Apache SkyWalking UI : from 10.2.0 through 10.4.0. Users are recommended to upgrade to Horizon UI 1.0.0, which fixes the...
CVE-2026-85229 Apache SkyWalking: CWE-79 stored XSS in Booster UI dashboard widgets (incomplete fix of CVE-2025-54057)
UNSUPPORTED WHEN ASSIGNED Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Apache SkyWalking Booster UI. This issue affects Apache SkyWalking UI : from 10.2.0 through 10.4.0. Users are recommended to upgrade to Horizon UI 1.0.0, which fixes the...
CVE-2026-85229
Apache SkyWalking UI versions 10.2.0 through 10.4.0 are vulnerable to a stored Cross-Site Scripting (XSS) vulnerability (CWE-79) in the Booster UI dashboard widgets . This issue is characterized as an incomplete fix of CVE-2025-54057, involving the improper neutralization of input during web page...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rust: cargo-1.98.0-1.hum1 aarch64, x8664 clippy-1.98.0-1.hum1 aarch64, x8664 rust-1.98.0-1.hum1 aarch64, x8664 rust-analyzer-1.98.0-1.hum1 aarch64, x8664 rust-debugger-common-1.98.0-1.hum1 noarch...
EUVD-2025-210844
The WPFunnels WordPress plugin before 3.13.0 does not check whether user registration is enabled on the site before creating accounts from opt-in form submissions, relying on a value supplied in the request instead, allowing unauthenticated attackers to create WordPress user accounts even when...