137262 matches found
PT-2026-72678
In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix stainfo check in rtw aes decrypt The null-pointer-guard was incorrect, returning FAIL on valid pointer. Invert the guard, so it returns FAIL on invalid pointer...
PT-2026-73032
Name of the Vulnerable Software and Affected Versions @fastify/oauth2 versions 7.2.0 through 8.2.x Description This plugin validates the OAuth state and the PKCE code verifier by comparing the callback query parameter against an unprefixed, predictable cookie that lacks server-side binding to the...
Linux Distros Unpatched Vulnerability : CVE-2026-74248
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenStack Octavia through 18.0.0 mishandles quality of service QoS policy authorization. By associating another project's QoS policy with an amphora, an...
CLSA-2026-1786748284 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 15.2.10-tuxcare.12...
CLSA-2026-1786746120 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 14.3.0-tuxcare.10...
CLSA-2026-1786745999 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 14.2.12-tuxcare.3...
CLSA-2026-1786743251 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 3 @angular packages to address 2 CVEs. Fixed in 12.2.0-tuxcare.4...
CLSA-2026-1786737301 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 6.1.10-tuxcare.11...
CLSA-2026-1786737120 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 6.0.1-tuxcare.5...
CLSA-2026-1786735405 TuxCare security update for @angular (2 CVEs)
TuxCare rebuilt 6 @angular packages to address 2 CVEs. Fixed in 5.2.7-tuxcare.5...
CVE-2026-73849
In CVE-2026-73849, Emlog (2.6.26 and earlier) allows unauthenticated reinstall via install.php?action=reinstall. The code path bypasses the already-installed guard when act != 'reinstall', letting a remote attacker submit hostname, dbuser, dbpasswd, dbname, dbprefix, username, password, and email...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tempo3.0: tempo3.0-3.0.3-0.1.hum1 aarch64, x8664 tempo3.0-3.0.3-0.1.hum1.src src...
CVE-2026-72834
filebrowser before 2.63.19 contains a permission bypass in the /api/resources endpoint. The checksum ?checksum= branch of resourceGetHandler reads the entire file to compute a digest and returns it without performing a Perm.Download check unlike the sibling raw, preview, and subtitle paths. As a...
CVE-2026-72832
Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. The event-handler scan is anchored at ?, which cannot cross the first literal ; when a appears inside a quoted attribute value the...
CVE-2026-72832 Grav before 2.0.12 Stored XSS via quoted-attribute bypass
Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerability in the Security::detectXss function system/src/Grav/Common/Security.php. The event-handler scan is anchored at ?, which cannot cross the first literal ; when a appears inside a quoted attribute value the...
RHSA-2026:54590 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:54574 Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:54550 Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update
Bulletin has no description...