60824 matches found
Security update for dracut
This update for dracut fixes the following issues: CVE-2026-6893: Root code execution via DHCP options command injection bsc1268322. CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module bsc1273580. Changes for dracut: Update to version...
SUSE-SU-2026:4078-1 Security update for dracut
This update for dracut fixes the following issues: - CVE-2026-6893: Root code execution via DHCP options command injection bsc1268322. - CVE-2026-16445: Root code execution via DHCP options command injection in NetworkManager initrd module bsc1273580. Changes for dracut: - Update to version...
CLEANSTART-2026-SH05010 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Multiple security vulnerabilities affect the opentelemetry-collector-contrib package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
EUVD-2026-72534
Lara Dashboard before 1.3.2 fails to authorize the MarketplaceModuleBrowser installModule Livewire action, allowing non-Superadmin administrators to install modules. Attackers can download and auto-activate arbitrary PHP modules from the marketplace over unsigned HTTP requests, achieving remote...
CVE-2026-78464: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-50093: Unrestricted Upload of File with Dangerous Type
A vulnerability has been identified in Siveillance Control Pro V3.0 All versions V3.0.12.2173, Siveillance Control Pro V4.0 All versions V4.0.9.2178, Siveillance Control V3.0 All versions V3.0.22.2177, Siveillance Control V4.0 All versions V4.0.11.2177. A vulnerability in the OIS web module allow...
CVE-2026-79572
The Distribution Management v1.0.0 software contains an XML External Entity (XXE) vulnerability within its level-rule module . Attackers can exploit this flaw by supplying a crafted XML payload to perform unauthorized actions, such as reading sensitive files , scanning internal networks , or laun...
CVE-2026-16037: Observable Timing Discrepancy
Observable timing discrepancy vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Black Box Reverse Engineering. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...
PT-2026-88518
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4 20 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulati...
PT-2026-87110
An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...
CVE-2026-69720: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-69440: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
CVE-2026-52486: Improper Verification of Cryptographic Signature
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
EUVD-2026-74266
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
CVE-2026-16025: Improper Validation of Specified Quantity in Input
Improper validation of specified quantity in input vulnerability in PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API v9x WHMCS Module allows Input Data Manipulation. This issue affects PayTR Virtual Pos iFrame API v9x WHMCS Module: from v9.0.0 before v9.0.3...
RHEL 9 : pam (RHSA-2026:64815)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64815 advisory. Pluggable Authentication Modules PAM provide a system to set up authentication policies without the need to recompile programs to handle...
Linux Distros Unpatched Vulnerability : CVE-2026-85484
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. The Select, RadioGroup,...
CVE-2026-68842: Exposure of Sensitive System Information to an Unauthorized Control Sphere
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...
CVE-2026-79572
An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...