Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk is a proof-of-concept not actively maintained or enhanced bootable image with GRUB2 bootloader designed to be used as a base for recovery USB flash drives. Key feature: disk is fully functional with UEFI Secure Boot mode activated. It can...

CVE-2026-122314

Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit resources to crash the policy engine. Attackers can submit resources with non-string fields referenced by - variable shallow substitution in policies, causing a panic th...

CVE-2026-122307

Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerator controller, which folds PolicyExceptions into generated ValidatingAdmissionPolicies while ignoring the --enablePolicyException, --exceptionNamespace, and policy kind gates. Users with namespaced create...

CVE-2026-122314

Kyverno versions prior to 1.19.2 are vulnerable to a Denial of Service (DoS) due to an unchecked type assertion in the variable-substitution engine . An attacker capable of submitting resources can trigger a panic by providing resources with non-string fields referenced via {{- variable }} shallo...

EUVD-2026-117225

Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit resources to crash the policy engine. Attackers can submit resources with non-string fields referenced by - variable shallow substitution in policies, causing a panic th...

EUVD-2026-117218

Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerator controller, which folds PolicyExceptions into generated ValidatingAdmissionPolicies while ignoring the --enablePolicyException, --exceptionNamespace, and policy kind gates. Users with namespaced create...

CVE-2026-122307

Kyverno versions prior to 1.19.2 are vulnerable to a policy bypass in the admissionpolicygenerator controller. The root cause is that the controller folds PolicyExceptions into generated ValidatingAdmissionPolicies while failing to respect specific gates such as --enablePolicyException, --excepti...

PT-2026-137336

Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit resources to crash the policy engine. Attackers can submit resources with non-string fields referenced by - variable shallow substitution in policies, causing a panic th...

PT-2026-137329

Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerator controller, which folds PolicyExceptions into generated ValidatingAdmissionPolicies while ignoring the --enablePolicyException, --exceptionNamespace, and policy kind gates. Users with namespaced create...

[SECURITY] [DSA 6611-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6611-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff November 04, 2026 https://www.debian.org/security/faq -...

CVE-2026-120421

In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client window mode is enabled jakarta.faces.CLIENTWINDOWMODE=url, the client window id from the jfwid or jakarta.faces.ClientWindow request parameter is appended to generated URLs...

CVE-2026-120421

In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, a reflected cross-site scripting (XSS) vulnerability exists when jakarta.faces.CLIENT_WINDOW_MODE=url is enabled. The root cause is that the client window id from the jfwid or jakarta.faces.Cli...

EUVD-2026-116938

In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client window mode is enabled jakarta.faces.CLIENTWINDOWMODE=url, the client window id from the jfwid or jakarta.faces.ClientWindow request parameter is appended to generated URLs...

CVE-2026-120421 Reflected XSS via client window id in URL client window mode

In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client window mode is enabled jakarta.faces.CLIENTWINDOWMODE=url, the client window id from the jfwid or jakarta.faces.ClientWindow request parameter is appended to generated URLs...

CVE-2026-121174

A missing authorization flaw was found in the BackgroundFetch component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/496008447 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the...

CVE-2026-121107

An incorrect authorization flaw was found in the BackgroundFetch component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/485855931 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending...

CVE-2026-121087

An improper input validation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570028521 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the...

CVE-2026-92121

A flaw was found in Apache WSS4J. This vulnerability allows a remote attacker to bypass security policy enforcement by submitting a specially crafted message using a Security Token Reference STR transformation. Due to an internal state tracking error in the streaming message processor, signature...

EUVD-2026-116385

Incorrect authorization in Blink in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

CVE-2026-120421: Eclipse Foundation Eclipse Mojarra: In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client…

In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client window mode is enabled jakarta.faces.CLIENTWINDOWMODE=url, the client window id from the jfwid or jakarta.faces.ClientWindow request parameter is appended to generated URLs...