38450 matches found
CVE-2026-89047 Social Media Share Buttons & Social Sharing Icons <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting via URL
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
CVE-2026-89047
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) via URL in versions up to and including 3.0.1 . The root cause is insufficient input sanitization and output escaping . Unauthenticated attackers can inject a...
CVE-2026-88999
The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...
EUVD-2026-90501
The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...
CVE-2026-101887
The BlueALSA daemon (bluez-alsa/bluealsad ) contains a division-by-zero vulnerability within the LC3plus sink decoder (specifically in a2dp-lc3plus.c and a2dp_lc3plus_dec_thread). A Bluetooth-adjacent attacker can trigger a SIGFPE by establishing an A2DP source connection and transmitting a non-f...
OPENSUSE-SU-2026:11949-1 python310-3.10.21-2.1 on GA media
These are all security issues fixed in the python310-3.10.21-2.1 package on the GA media of openSUSE Tumbleweed...
helm3-3.22.0-2.1 on GA media (moderate)
helm3-3.22.0-2.1 on GA media Announcement ID: openSUSE-SU-2026:11892-1 Rating: moderate Cross-References: CVE-2026-81871 CVE-2026-81872 CVSS scores: CVE-2026-81871 SUSE : 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-81872 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L Affect...
kernel-devel-7.2.8-1.1 on GA media (moderate)
kernel-devel-7.2.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11893-1 Rating: moderate Cross-References: CVE-2026-100070 CVE-2026-89525 CVE-2026-90149 CVE-2026-90150 CVE-2026-90152 CVE-2026-90165 CVE-2026-90166 CVE-2026-90167 CVE-2026-90169 CVE-2026-90183 CVE-2026-90184 CVE-2026-90197...
CentOS Linux 7 [TuxCare] Security Update: kernel / kernel-debug / kernel-debug-devel / kernel-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1743676155)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1743676155 advisory. - In the Linux kernel, the following vulnerability has been resolved: drm: nv04: Fix out of bounds access When Output Resource dcb-or...
Rocky Linux 10.0 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_8137)
The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20258137 advisory. kernel: media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat CVE-2024-53104 kernel: vsock: Keep the binding until socket...
Rocky Linux 10.0 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_11428)
The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202511428 advisory. kernel: media: uvcvideo: Remove dangling pointers CVE-2024-58002 kernel: media: uvcvideo: Fix double free in error path CVE-2024-57980 kernel: wifi:...
mistral-vibe-2.25.8-1.1 on GA media (moderate)
mistral-vibe-2.25.8-1.1 on GA media Announcement ID: openSUSE-SU-2026:11900-1 Rating: moderate Cross-References: CVE-2026-93993 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
Linux Distros Unpatched Vulnerability : CVE-2026-102315
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read...
OPENSUSE-SU-2026:11950-1 python313-3.13.15-2.1 on GA media
These are all security issues fixed in the python313-3.13.15-2.1 package on the GA media of openSUSE Tumbleweed...
Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_11411)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202511411 advisory. kernel: media: uvcvideo: Remove dangling pointers CVE-2024-58002 kernel: sunrpc: handle SVCGARBAGE during svc auth processing as auth error CVE-2025-38089...
OPENSUSE-SU-2026:11945-1 jupyter-jupyterlab-4.5.11-1.1 on GA media
These are all security issues fixed in the jupyter-jupyterlab-4.5.11-1.1 package on the GA media of openSUSE Tumbleweed...
Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2022_8554)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20228554 advisory. Mozilla: Service Workers might have learned size of cross-origin media files CVE-2022-45403 Mozilla: Fullscreen notification bypass CVE-2022-45404 Mozilla:...
SUSE CVE-2026-102315
Uninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...