25814 matches found
SUSE-SU-2026:20180-1 Security update for unbound
This update for unbound fixes the following issues: Update to 1.24.1: - CVE-2025-11411: Fixed possible domain hijacking attack bsc1252525...
WordPress BuddyBoss Platform plugin < 2.6.0 - Subscriber+ Comment on Private Post via IDOR vulnerability
Subscriber+ Comment on Private Post via IDOR vulnerability discovered by Faris Krivic in WordPress Plugin Buddyboss Platform versions 2.6.0...
SUSE CVE-2026-22994
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference count leak in bpfprogtestrunxdp syzbot is reporting unregisternetdevice: waiting for sit0 to become free. Usage count = 2 problem. A debug printk patch found that a refcount is obtained at xdpconvertmdtobuff fr...
SUSE: Security Advisory (SUSE-SU-2026:20132-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2026-43851
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the gfs2 iomap inline data write path. The inline data buffer head dibh is released prematurely in the gfs2 iomap begin function via release metapath,...
CVE-2026-24845
malcontent discovers supply-chain compromises through. context, differential analysis, and YARA. Starting in version 0.10.0 and prior to version 1.20.3, malcontent could be made to expose Docker registry credentials if it scanned a specially crafted OCI image reference. malcontent uses...
MINI-P964-962P-CXCR
Bulletin has no description...
CVE-2026-1389
The Document Embedder – Embed PDFs, Word, Excel, and Other Files plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.0.4. This is due to the plugin not verifying that a user has permission to access the requested resource in the...
CVE-2026-24909
vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction...
ECHO-003F-2632-599C This vulnerability is disputed by the openssh maintainers, and is considered expected and necessary behavior. https://security-tracker.debian.org/tracker/CVE-2008-3234 https://access.redhat.com/security/cve/cve-2008-3234
Bulletin has no description...
ECHO-DF10-54DF-BA97 This vulnerability is not applicable as Echo images do not ship with libraries enabling S/KEY or OPIE authentication. https://security-tracker.debian.org/tracker/CVE-2007-2768 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=112279
Bulletin has no description...
CGA-FCW9-97P6-2Q84
Bulletin has no description...
CGA-FFCH-CHM5-G4G9
Bulletin has no description...
CGA-RGX5-68VX-C6PV
Bulletin has no description...
CGA-RFC7-C2XC-XC48
Bulletin has no description...
CGA-RF49-J95F-4423
Bulletin has no description...
CGA-RF4X-R6WH-QHGR
Bulletin has no description...
CGA-RF23-3R6F-FWWW
Bulletin has no description...