Debian dla-4441 : gpsd - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4441 advisory. [email protected] Subject: SECURITY DLA 4441-1 gpsd security update - ------------------------------------------------------------------------- Debia...

CVE-2026-23525 1panel App Store vulnerable to Cross-site Scripting

1Panel is an open-source, web-based control panel for Linux server management. A stored Cross-Site Scripting XSS vulnerability exists in the 1Panel App Store when viewing application details. Malicious scripts can execute in the context of the user’s browser, potentially compromising session data...

CVE-2026-23525 1panel App Store vulnerable to Cross-site Scripting

1Panel is an open-source, web-based control panel for Linux server management. A stored Cross-Site Scripting XSS vulnerability exists in the 1Panel App Store when viewing application details. Malicious scripts can execute in the context of the user’s browser, potentially compromising session data...

CVE-2026-23525 1panel App Store vulnerable to Cross-site Scripting

1Panel is an open-source, web-based control panel for Linux server management. A stored Cross-Site Scripting XSS vulnerability exists in the 1Panel App Store when viewing application details. Malicious scripts can execute in the context of the user’s browser, potentially compromising session data...

PT-2026-3400

Name of the Vulnerable Software and Affected Versions 1Panel versions through 1.10.33-lts 1Panel versions through 2.0.16 Description 1Panel is a web-based control panel for Linux server management. A stored Cross-Site Scripting XSS issue exists in the 1Panel App Store when viewing application...

Debian dla-4440 : ffmpeg - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4440 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4440-1 [email protected]...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 : Rack vulnerabilities (USN-7960-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7960-1 advisory. It was discovered that Rack incorrectly handled certain query parameters. An attacker could...

[SECURITY] [DLA 4439-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4439-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort January 15, 2026 https://wiki.debian.org/LTS -...

Aimeos contains a SQL injection vulnerability in the json api 'sort' parameter

Aimeos 2021.10 LTS contains a SQL injection vulnerability in the json api 'sort' parameter that allows attackers to inject malicious database queries. Attackers can manipulate the sort parameter to reveal table and column names by sending crafted GET requests to the jsonapi/review endpoint...

[SECURITY] [DLA 4438-1] mongo-c-driver security update

Debian LTS Advisory DLA-4438-1 [email protected] https://www.debian.org/lts/security/ Roberto C. Sánchez January 14, 2026 https://wiki.debian.org/LTS Package : mongo-c-driver Version : 1.17.6-1+deb11u2 CVE ID : CVE-2025-12119 A vulnerability has been discovered in mongo-c-driver, the...

[SECURITY] [DLA 4436-1] linux-6.1 security update

Debian LTS Advisory DLA-4436-1 [email protected] https://www.debian.org/lts/security/ Ben Hutchings January 14, 2026 https://wiki.debian.org/LTS Package : linux-6.1 Version : 6.1.159-1deb11u1 CVE ID : CVE-2024-47666 CVE-2025-37899 CVE-2025-38057 CVE-2025-38556 CVE-2025-38593...

USN-7958-1 angular.js vulnerabilities

It was discovered that AngularJS did not properly sanitize certain xlink:href attributes. A remote attacker could possibly use this issue to perform cross site scripting. This issue only affected Ubuntu 16.04 LTS. CVE-2019-14863 It was discovered that AngularJS incorrectly handled certain regular...

Ubuntu 24.04 LTS : Erlang vulnerability (USN-7961-1)

The remote Ubuntu 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7961-1 advisory. It was discovered that Erlang incorrectly validated peer certificates when incorrect extended key usage was presented. A remote attacker could possibly use this...

Debian dla-4438 : libbson-1.0-0 - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4438 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4438-1 [email protected] https://www.debian.org/lts/security/...

Debian dla-4436 : linux-config-6.1 - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4436 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4436-1 [email protected]...

Debian dla-4434 : sogo - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4434 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4434-1 [email protected]...

CVE-2021-41144

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, a layout block was able to bypass the block blacklist to execute remote code. Versions 19.4.22 and 20.0.19 contain a patch for this issue...

Debian dla-4435 : libsodium-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4435 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4435-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] [DLA 4432-1] curl security update

Debian LTS Advisory DLA-4432-1 [email protected] https://www.debian.org/lts/security/ Carlos Henrique Lima Melara January 04, 2026 https://wiki.debian.org/LTS Package : curl Version : 7.74.0-1.3+deb11u16 CVE ID : CVE-2025-9086 Debian Bug : A vulnerability was found in Curl, an easy-to-u...

Debian dla-4432 : curl - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4432 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4432-1 [email protected] https://www.debian.org/lts/security/...