6124 matches found
OPENSUSE-SU-2026:21590-1 Security update for kubevirt1.8
This update for kubevirt1.8 fixes the following issues: Update to version 1.8.4. Security issues fixed: - CVE-2026-13201: virt-handler-rhel9: kubevirt: safepath OpenAtNoFollow symlink following via /proc/self/fd allows host file metadata modification bsc1269093. - CVE-2026-13622: virt-handler...
GO-2026-6233 Openshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to include malicious SQL commands in github.com/kubev2v/migration-planner
Openshift Migration Advisor: Improper input sanitization allows specially crafted RVTools .xlsx files to include malicious SQL commands in github.com/kubev2v/migration-planner...
GO-2026-6231 Assisted Migration Agent: Path traversal in gzipped tarball handling enables arbitrary file write and remote code execution in github.com/kubev2v/assisted-migration-agent
Assisted Migration Agent: Path traversal in gzipped tarball handling enables arbitrary file write and remote code execution in github.com/kubev2v/assisted-migration-agent...
GO-2026-6229 Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs in github.com/kubev2v/migration-planner
Openshift Migration Advisor: Broken access control in migration-planner image-url endpoint exposes other users' OVA images and agent JWTs in github.com/kubev2v/migration-planner...
GO-2026-6232 Assisted Migration Agent: Hardcoded insecure Transport Layer Security (TLS) connections during vCenter communication in github.com/kubev2v/assisted-migration-agent
Assisted Migration Agent: Hardcoded insecure Transport Layer Security TLS connections during vCenter communication in github.com/kubev2v/assisted-migration-agent...
GO-2026-6228 Openshift Migration Advisor agent-API fails to validate JWT source_id claim, allowing cross-tenant data manipulation in github.com/kubev2v/migration-planner
Openshift Migration Advisor agent-API fails to validate JWT sourceid claim, allowing cross-tenant data manipulation in github.com/kubev2v/migration-planner...
GO-2026-6224 Openshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API in github.com/kubev2v/migration-planner
Openshift Migration Advisor lacks proper authorization and filtering for its DELETE /api/v1/sources API in github.com/kubev2v/migration-planner...
WordPress Backup Migration plugin < 2.1.7 - Admin+ Privilege Escalation via Post-Restore Auto-Login vulnerability
Admin+ Privilege Escalation via Post-Restore Auto-Login vulnerability discovered by Thanh Lam Tang in WordPress Plugin Backup Migration versions 2.1.7...
SUSE CVE-2026-6426
A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the VMSVBUFFER load path as a signed int32t. On little-endian hosts, a crafted incoming migration state with bit 31 set causes the value to b...
PT-2026-80452
Assisted Migration Agent: Hardcoded insecure Transport Layer Security TLS connections during vCenter communication in github.com/kubev2v/assisted-migration-agent...
PT-2026-80448
Openshift Migration Advisor agent-API fails to validate JWT source id claim, allowing cross-tenant data manipulation in github.com/kubev2v/migration-planner...
PT-2026-80451
Assisted Migration Agent: Path traversal in gzipped tarball handling enables arbitrary file write and remote code execution in github.com/kubev2v/assisted-migration-agent...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-102138)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-102138 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix folio is still mapped when deleted Migration may be raced with fallocating hole...
Linux Distros Unpatched Vulnerability : CVE-2026-72286
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs The intra-host...
PT-2026-77851
Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description An issue exists in the Migration component of the Siebel CRM Deployment product. An unauthenticated attacker with network access via HTTP can compromise the system, potentially leading t...
CVE-2026-70856: Improper Access Control
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Migration. Supported versions that are affected are 17.0-26.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks...
CVE-2026-60798: Improper Access Control
Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM component: Migration. Supported versions that are affected are 17.0-26.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. While the vulnerabili...
Linux Distros Unpatched Vulnerability : CVE-2026-72173
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: fs/proc/taskmmu: do not warn on seeing non-migration pmd entry Patch series mm/hmm: A fix an...
PT-2026-77392
Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.6 Description A flaw in the Migration component of the Siebel CRM Deployment product allows a low privileged attacker with network access via HTTP to compromise the system. This issue can lead to...