34857 matches found
acl-2.4.0-1.1 on GA media (moderate)
acl-2.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11312-1 Rating: moderate Cross-References: CVE-2026-54369 CVE-2026-54370 CVE-2026-54371 CVSS scores: CVE-2026-54369 SUSE : 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2026-54369 SUSE : 8.8...
OPENSUSE-SU-2026:11320-1 libntfs-3g-devel-2022.10.3-8.1 on GA media
These are all security issues fixed in the libntfs-3g-devel-2022.10.3-8.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11322-1 python313-Js2Py-0.74-6.1 on GA media
These are all security issues fixed in the python313-Js2Py-0.74-6.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-63452
These are all security issues fixed in the python313-Js2Py-0.74-6.1 package on the GA media of openSUSE Tumbleweed...
USN-8573-1: libde265 vulnerabilities
It was discovered that libde265 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause libde265 to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. CVE-2023-51792 It was discovered that libde265 did not...
USN-8573-1 libde265 vulnerabilities
It was discovered that libde265 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause libde265 to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS. CVE-2023-51792 It was discovered that libde265 did not...
CVE-2026-60030
Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an improper access control. Authenticated users could upload media files regardless of their media management permissions...
CVE-2026-60030
The CVE-2026-60030 entry concerns Joomla’s Quix Page Builder Pro (thethemexpert extension) with a broken access control in media management. Authenticated users can upload media irrespective of their permissions. The CVE list notes this affects versions before 6.2.1; remediation is to update to 6...
CVE-2026-60030 Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1
Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an improper access control. Authenticated users could upload media files regardless of their media management permissions...
CVE-2026-60030 Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder < 6.2.1
Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an improper access control. Authenticated users could upload media files regardless of their media management permissions...
EUVD-2026-46056
The Joomla extension Quix Page Builder Pro is vulnerable to an improper access control. Authenticated users could upload media files regardless of their media management permissions...
CVE-2026-60030
Joomla Extension - themexpert.com - Broken Access Control for media management in Quix Page Builder 6.2.1 - The Joomla extension Quix Page Builder Pro is vulnerable to an improper access control. Authenticated users could upload media files regardless of their media management permissions...
CVE-2026-46555
The CVE applies to WhatsApp MCP Server, where the whatsapp-bridge HTTP API on 127.0.0.1:8080 is unauthenticated and lacks Host header validation. The /api/send endpoint accepts an absolute media_path, enabling a local caller (including sibling MCP servers, IDE extensions, or other processes in th...
CVE-2026-63429
creationtimestamp| type| source ---|---|--- 2026-07-20 17:00:33+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rg45qoq2j 2026-07-20 17:11:49+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116953416257282503 2026-07-20 17:11:49+00:00| seen|...
CVE-2026-51027
creationtimestamp| type| source ---|---|--- 2026-07-20 16:42:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr3qf2lcto2r 2026-07-20 17:00:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3rgcsfas2f 2026-07-20 17:50:52+00:00| seen|...
media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si
...
PT-2026-61653
Name of the Vulnerable Software and Affected Versions WhatsApp MCP Server versions prior to 0.2.1 Description The whatsapp-bridge HTTP API listens on 127.0.0.1:8080 without authentication or Host header validation. Additionally, the /api/send endpoint accepts an absolute media path parameter...
PT-2026-62029
Name of the Vulnerable Software and Affected Versions libgit2 versions prior to 1.9.6-1.1 Description Security issues were identified and subsequently fixed in the libgit2 package. Recommendations Update to version 1.9.6-1.1...