239550 matches found
RHSA-2026:57541 Red Hat Security Advisory: osbuild-composer security update
Bulletin has no description...
RHSA-2026:57462 Red Hat Security Advisory: curl security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:57451 Red Hat Security Advisory: cups-filters security update
Bulletin has no description...
CVE-2026-48590
CVE-2026-48590 is an XML Injection vulnerability in the Elixir library xml_builder (by joshnuss), affecting versions 0.0.1 through before 2.4.1 . The root cause is that element names, attribute names, and doctype identifiers are interpolated verbatim into the serialized XML output without escapin...
EUVD-2026-63879
XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.element/1, XmlBuilder.element/2,...
CVE-2026-47080
CVE-2026-47080 is an XML Injection vulnerability in the joshnuss xml_builder Elixir library (versions 0.0.7 through before 2.4.1 ). The root cause is in XmlBuilder.escape/1 within lib/xml_builder.ex: when handling {:cdata, data}, the data is placed verbatim between without splitting on embedded ...
CVE-2026-47080 CDATA Section Breakout via Unsanitised ]]> in xml_builder
XML Injection vulnerability in joshnuss xmlbuilder XmlBuilder module allows Content Spoofing, XML Injection. This vulnerability is associated with program files lib/xmlbuilder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2, XmlBuilder.escape/1. The escape/1 clause for :cdata...
MINI-JCJJ-CWR4-Q244
Bulletin has no description...
CLSA-2026-1787301097 TuxCare security update for io.netty (58 CVEs)
TuxCare rebuilt 47 io.netty packages to address 58 CVEs. Fixed in 4.1.119.Final-tuxcare.1...
ECHO-A2FC-1E4E-DFA3
Bulletin has no description...
CGA-VM56-VV7P-FQ86
Bulletin has no description...
CGA-427Q-QF49-9QC2
Bulletin has no description...
CVE-2026-16959
The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...
CLSA-2026-1787292931 TuxCare security update for io.projectreactor.netty (2 CVEs)
TuxCare rebuilt 4 io.projectreactor.netty packages to address 2 CVEs. Fixed in 1.1.31-tuxcare.1...
CVE-2026-16959
CVE-2026-16959 affects the Media Library Assistant WordPress plugin prior to version 3.40 . The root cause is an unvalidated search parameter (identified as mla_search_connector ) that is concatenated directly into a SQL query within a media-library query handler, enabling SQL injection by authen...
EUVD-2026-63820
The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...
CVE-2026-16959 Media Library Assistant < 3.40 - Author+ SQL Injection via mla_search_connector
The Media Library Assistant WordPress plugin before 3.40 does not validate a search parameter before concatenating it into a SQL query in one of its media-library query handlers, allowing users with the Author role to perform SQL injection...
ROOT-APP-MAVEN-CVE-2026-40984 CVE-2026-40984 in io.micrometer:micrometer-core - Patched by Root
Root has patched CVE-2026-40984 in the io.micrometer:micrometer-core package for Root:Maven. Multiple fixed versions available...