40755 matches found
CVE-2026-88999
The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...
EUVD-2026-90501
The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...
CVE-2026-88999 Redux Framework <= 4.5.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Attachment Deletion via 'attachment_id' Parameter
The Redux Framework plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.5.14 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level...
CVE-2026-101887
The BlueALSA daemon (bluez-alsa/bluealsad ) contains a division-by-zero vulnerability within the LC3plus sink decoder (specifically in a2dp-lc3plus.c and a2dp_lc3plus_dec_thread). A Bluetooth-adjacent attacker can trigger a SIGFPE by establishing an A2DP source connection and transmitting a non-f...
SUSE CVE-2026-97577
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity rockchipvpu981av1decsettileinfo indexes the tile group entry array by tile1 tilecols + tile0, reading up to tilecols tilerows entries, lays out one...
SUSE CVE-2026-97578
In the Linux kernel, the following vulnerability has been resolved: media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer rockchipvpu981av1decsettileinfo divides contextupdatetileid by tileinfo-tilecols and writes one descriptor per tile into the tileinfo DMA buffer, which holds...
SUSE CVE-2026-97579
In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity vdecav1slicesetuptile copies tilecols + 1 / tilerows + 1 entries into micolstarts / mirowstarts from the bitstream tileinfo. Bound the copy to the array...
SUSE CVE-2026-97580
In the Linux kernel, the following vulnerability has been resolved: media: rkvdec: bound HEVC tile loops and PPS id to the array capacity computetilesuniform and computetilesnonuniform loop over numtilecolumnsminus1 + 1 / numtilerowsminus1 + 1 entries, and assemblehwpps writes one COLUMNWIDTH /...
OPENSUSE-SU-2026:11939-1 amazon-cloudwatch-agent-1.300073.0-1.1 on GA media
These are all security issues fixed in the amazon-cloudwatch-agent-1.300073.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11942-1 cpp7-7.5.0+r278197-25.1 on GA media
These are all security issues fixed in the cpp7-7.5.0+r278197-25.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-105655
These are all security issues fixed in the python313-langchain-anthropic-1.7.5-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-105649
These are all security issues fixed in the apache-sshd-2.20.0-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-105659
These are all security issues fixed in the python313-3.13.15-2.1 package on the GA media of openSUSE Tumbleweed...
Rocky Linux 9 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2025_11411)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202511411 advisory. kernel: media: uvcvideo: Remove dangling pointers CVE-2024-58002 kernel: sunrpc: handle SVCGARBAGE during svc auth processing as auth error CVE-2025-38089...
OPENSUSE-SU-2026:11952-1 zcode-3.14.3-1.1 on GA media
These are all security issues fixed in the zcode-3.14.3-1.1 package on the GA media of openSUSE Tumbleweed...
CVE-2026-89047: Improper Neutralization of Input During Web Page Generation
The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...
PT-2026-105656
These are all security issues fixed in the python313-sglang-0.5.20-2.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11947-1 python313-sglang-0.5.20-2.1 on GA media
These are all security issues fixed in the python313-sglang-0.5.20-2.1 package on the GA media of openSUSE Tumbleweed...