4160 matches found
CLSA-2026-1781484855 TuxCare security update for form-data (1 CVE)
TuxCare rebuilt form-data to address 1 CVE. Fixed in 4.0.1-tuxcare.1...
CLSA-2026-1780879904 TuxCare security update for basic-ftp (2 CVEs)
TuxCare rebuilt basic-ftp to address 2 CVEs. Fixed in 5.0.5-tuxcare.2...
CLSA-2026-1780361406 TuxCare security update for diff (1 CVE)
TuxCare rebuilt diff to address 1 CVE. Fixed in 4.0.2-tuxcare.1...
CLSA-2026-1779324473 TuxCare security update for postcss (4 CVEs)
TuxCare rebuilt postcss to address 4 CVEs. Fixed in 7.0.32-tuxcare.1...
CLSA-2026-1777163890 TuxCare security update for 39 packages (2 CVEs)
TuxCare rebuilt 39 packages to address 2 CVEs. Fixed in 9.0.100-tuxcare.6...
CLSA-2026-1777250300 TuxCare security update for 2 packages (2 CVEs)
TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 2.0.4-tuxcare.4...
CLSA-2026-1776213255 TuxCare security update for 38 packages (3 CVEs)
TuxCare rebuilt 38 packages to address 3 CVEs. Fixed in 9.0.90-tuxcare.5...
CLSA-2026-1771978232 TuxCare security update for 38 packages (1 CVE)
TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.90-tuxcare.3...
CLSA-2025-1765930090 TuxCare security update for 38 packages (9 CVEs)
TuxCare rebuilt 38 packages to address 9 CVEs. Fixed in 9.0.75-tuxcare.2...
CLSA-2025-1766362095 TuxCare security update for 39 packages (12 CVEs)
TuxCare rebuilt 39 packages to address 12 CVEs. Fixed in 9.0.100-tuxcare.1...
CLSA-2025-1763338014 TuxCare security update for 38 packages (10 CVEs)
TuxCare rebuilt 38 packages to address 10 CVEs. Fixed in 9.0.90-tuxcare.1...
SUSE SLES12: tomcat / tomcat-admin-webapps / tomcat-docs-webapp / etc (SUSE-SU-2026:3440-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3440-1 advisory. Update to Tomcat 9.0.120: Security issues fixed: - CVE-2026-59083: incorrect URL decoding in RewriteValve may allow security control bypass...
CVE-2026-67969
An issue in the HSMonitorApplications component of NASA cFS v7.0.1 allows attackers to force the processor to reset via supplying a crafted HS.AppMonTbl entry...
EUVD-2026-52031
In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy failures silently ignored. This issue also affects Bouncy Castle for Java FIPS BC-FJA before bcpg-fips 2.0.13...
CVE-2026-15964
The WordPress plugin Single Sign On For TNG (WordPress) is affected up to version 2.0.0 by an authentication bypass via unauthenticated password reset. The root cause is the ssoprocess_ajax() handler (wp_ajax_nopriv_ssoprocess_ajax) accepting an attacker-supplied email with setnewpassword and cal...
CVE-2026-15601 Kirki <= 6.0.13 - Authenticated (Editor+) Path Traversal to Arbitrary File Write (Zip Slip)
The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Path Traversal Zip Slip in all versions up to, and including, 6.0.13 via the extractzipfile function. This makes it possible for authenticated attackers, with custom-level access and above, to...
CVE-2026-54737
@phun-ky/defaults-deep is a library like lodash defaultsDeep with array preservation and no lodash dependency. Prior to 2.0.5, defaultsDeep recursively merges user-supplied objects without filtering proto, constructor, and prototype, allowing properties to be written to Object.prototype. This iss...
Security Bulletin: IBM WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is affected by an authentication bypass
Summary IBM WebSphere Application Server shipped with Jazz for Service Management JazzSM is affected by an authentication bypass CVE-2026-16184 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products| Versions...
Atlassian Confluence 9.0.1 / 9.1.x / 9.2.x < 9.2.17 / 9.3.1 / 9.4.x / 9.5.1 / 10.0.2 / 10.1.x / 10.2.x < 10.2.7 (CONFSERVER-104334)
The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-104334 advisory. - This High severity DoS Denial of Service vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and...