30900 matches found
CVE-2026-34463
Mantis Bug Tracker MantisBT is an open source issue tracker. Versions 2.28.1 and prior contain a Stored XSS vulnerability. When cloning an issue originating from a Project other than the current one, the clone form bugreportpage.php prepends the source Project name before the category selector...
Security update for yq
This update for yq fixes the following issues: CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files bsc1267053. CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows...
Security update for mariadb
This update for mariadb fixes the following issues: Security fixes: CVE-2026-3494: audit plugin comment handling bypass bsc1259176. CVE-2026-44168: wsrep SST unsafe parameter handling on the donor side bsc1266442. CVE-2026-44170: argument injection in CONNECT REST Xcurl on Windows via unsanitized...
MINI-CP9P-FG6Q-WXMP
Bulletin has no description...
OPENSUSE-SU-2026:10963-1 python311-aiohttp-3.14.0-1.1 on GA media
These are all security issues fixed in the python311-aiohttp-3.14.0-1.1 package on the GA media of openSUSE Tumbleweed...
AlmaLinux 9 : mysql (ALSA-2026:23332)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:23332 advisory. mysql: InnoDB unspecified vulnerability CPU Apr 2026 CVE-2026-22004 mysql: Information Schema unspecified vulnerability CPU Apr 2026 CVE-2026-22001 mysql...
OPENSUSE-SU-2026:10964-1 libsofia-sip-ua-glib3-1.13.17+50-1.1 on GA media
These are all security issues fixed in the libsofia-sip-ua-glib3-1.13.17+50-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:10961-1 ggml-devel-9500-1.1 on GA media
These are all security issues fixed in the ggml-devel-9500-1.1 package on the GA media of openSUSE Tumbleweed...
RockyLinux 10 : thunderbird (RLSA-2026:22325)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22325 advisory. firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component CVE-2026-8388 firefox: Other issue in the JavaScript Engine component...
Important: Red Hat Security Advisory: tigervnc security update
An update for tigervnc is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
GHSA-HG6J-4RV6-33PG vulnerabilities
Vulnerabilities for packages: airflow-core, dagster, datahub-ingestion, tritonserver-backend-vllm-cuda-13.0, keep-fips, opal, gitlab-cng, tritonserver-backend-vllm-cuda-12.9, gitlab-cng-fips, text-generation-inference, open-webui, kubeflow-katib, py3-vllm-cuda-13.0, nemo,...
[slackware-security] tigervnc
New tigervnc packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/tigervnc/tigervnc-1.16.2-i586-3slack15.0.txz: Rebuilt. Patched with fixes for the following xorg-server security issues: Font Alias Stack-based...
OPENSUSE-SU-2026:10954-1 kernel-devel-7.0.11-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.0.11-1.1 package on the GA media of openSUSE Tumbleweed...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : nginx vulnerabilities (USN-8375-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8375-1 advisory. It was discovered that the nginx ngxmailsmtpmodule module incorrectly handled certain memory operations when doing SM...
OPENSUSE-SU-2026:10953-1 gleam-1.17.0-1.1 on GA media
These are all security issues fixed in the gleam-1.17.0-1.1 package on the GA media of openSUSE Tumbleweed...
RockyLinux 10 : firefox (RLSA-2026:21380)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:21380 advisory. firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component CVE-2026-8388 firefox: Other issue in the JavaScript Engine component...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : Dovecot vulnerabilities (USN-8365-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8365-1 advisory. It was discovered that Dovecot incorrectly treated some variable expansion pipelines as safe in authentication filters. A...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...