Lucene search
+L

19679 matches found

Rockylinux
Rockylinux
added 2026/07/07 6:0 a.m.6 views

grafana-pcp security update

An update is available for grafana-pcp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Grafana plugin for Performance Co-Pilot includes datasources for...

9.6CVSS6AI score0.00478EPSS
SaveExploits0
OSV
OSV
added 2026/07/07 6:0 a.m.6 views

RLSA-2026:35830 Important: grafana security update

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 For more details about the security issue...

8.2CVSS5.9AI score0.00478EPSS
SaveExploits0References2
Redos
Redos
added 2026/07/07 12:0 a.m.4 views

ROS-20260707-73-0038

The vulnerability of the net/textproto component in the Go programming language is related to incorrect processing of output data for registration logs. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

5.3CVSS6.4AI score0.0037EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:0 a.m.10 views

RockyLinux 10 : grafana (RLSA-2026:35827)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:35827 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 Tenable has extracted the...

9.6CVSS6.4AI score0.00478EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-54060

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile assembled per- glyph images into a combined bitmap with Image.new1, xsize,...

7.5CVSS5.3AI score0.00361EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:0 a.m.12 views

RockyLinux 8 : grafana-pcp (RLSA-2026:35831)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:35831 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 Tenable has extracted the...

9.6CVSS6.7AI score0.00478EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:0 a.m.8 views

RockyLinux 10 : grafana-pcp (RLSA-2026:35826)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:35826 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 Tenable has extracted the...

9.6CVSS6.7AI score0.00478EPSS
SaveExploits0References3
AlmaLinux
AlmaLinux
added 2026/07/07 12:0 a.m.8 views

Important: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 crypto/x509: golang: golang crypto/x509: Denial of...

7.5CVSS7.2AI score0.00939EPSS
SaveExploits0References6
OSV
OSV
added 2026/07/07 12:0 a.m.6 views

ALSA-2026:36317 Important: skopeo security update

The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fixes: net/url: Incorrect parsing of IPv6 host literals in net/url CVE-2026-25679 crypto/x509: golang: golang crypto/x509: Denial of...

7.5CVSS7AI score0.00939EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/07 12:0 a.m.7 views

RHEL 9 : skopeo (RHSA-2026:36317)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:36317 advisory. The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and...

7.5CVSS6.1AI score0.00939EPSS
SaveExploits0References6
Snyk
Snyk
added 2026/07/06 8:42 p.m.7 views

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in the FontFile.compile process. An attacker can cause excessive memory allocation by providing a specially crafted font file that triggers uncontrolled resource consumption during image...

8.7CVSS6AI score0.00361EPSS
SaveExploits1References2
EUVD
EUVD
added 2026/07/06 7:51 p.m.8 views

EUVD-2026-24978

comm: lossy UTF-8 conversion silently corrupts non-UTF-8 output...

3.3CVSS5.9AI score0.00176EPSS
SaveExploits1References6
PyPA
PyPA
added 2026/07/06 7:17 p.m.7 views

PYSEC-2026-2253

Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py loadbitmaps read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes without calling Image.decompressionbombcheck, allowing crafted PCF font data to cause excessive memory allocation. Thi...

7.5CVSS6.1AI score0.00354EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2026/07/06 6:49 p.m.7 views

CVE-2026-54060

Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile assembled per-glyph images into a combined bitmap with Image.new"1", xsize, ysize without calling Image.decompressionbombcheck, allowing a font to trigger excessive allocation during conversion or saving. This...

7.5CVSS6AI score0.00361EPSS
SaveExploits1
NVD
NVD
added 2026/07/06 8:16 a.m.11 views

CVE-2026-6382

The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager Pro WordPress plugin before 2.1.1, File Manager WordPress plugin before 8.0.4 do not properly escape a parameter before passing it to a shell command when processing image operation...

9.1CVSS0.00902EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/06 6:0 a.m.33 views

CVE-2026-6382

The CVE affects multiple elFinder-based WordPress plugins: FileOrganizer (before 1.1.9), Advanced File Manager (before 5.4.12), File Manager Pro (before 2.1.1), and File Manager (before 8.0.4). The root cause is improper escaping of a parameter passed to a shell command during image operations, e...

9.1CVSS6AI score0.00902EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/06 6:0 a.m.40 views

CVE-2026-6382 Multiple elFinder Plugins - Authenticated OS Command Injection

The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager Pro WordPress plugin before 2.1.1, File Manager WordPress plugin before 8.0.4 do not properly escape a parameter before passing it to a shell command when processing image operation...

0.00902EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/06 6:0 a.m.7 views

CVE-2026-6382

The FileOrganizer WordPress plugin before 1.1.9, Advanced File Manager WordPress plugin before 5.4.12, File Manager Pro WordPress plugin before 2.1.1, File Manager WordPress plugin before 8.0.4 do not properly escape a parameter before passing it to a shell command when processing image operation...

9.1CVSS6AI score0.00902EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/07/06 12:0 a.m.10 views

PT-2026-56068

Name of the Vulnerable Software and Affected Versions Coder versions 2.17.0 through 2.29.6 Coder versions 2.32.0 through 2.32.6 Coder versions 2.33.0 through 2.33.7 Coder versions 2.34.0 through 2.34.1 Description The POST /api/v2/files endpoint converts zip uploads to tar in memory using the...

6.5CVSS6.4AI score0.00602EPSS
SaveExploits0References14
Tenable Nessus
Tenable Nessus
added 2026/07/06 12:0 a.m.6 views

AlmaLinux 8 : grafana (ALSA-2026:35830)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:35830 advisory. golang.org/x/net/idna: golang: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-39821 Tenable has extracted the...

9.6CVSS6AI score0.00478EPSS
SaveExploits0References3
Rows per page
Query Builder