8738 matches found
CLEANSTART-2026-EC57959 protojson
Multiple security vulnerabilities affect the cluster-proportional-autoscaler package. The protojson. See references for individual vulnerability details...
CVE-2026-5160: Improper Neutralization of Input During Web Page Generation
Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting XSS due to improper ordering of URL validation and normalization. The renderer validates link destinations using a prefix-based check IsDangerousURL before resolving HTML entities...
tomcat10-10.1.54-1.1 on GA media (moderate)
tomcat10-10.1.54-1.1 on GA media Announcement ID: openSUSE-SU-2026:10548-1 Rating: moderate Cross-References: CVE-2026-24880 CVE-2026-25854 CVE-2026-29129 CVE-2026-29145 CVE-2026-29146 CVE-2026-32990 CVE-2026-34483 CVE-2026-34486 CVE-2026-34487 CVE-2026-34500 CVSS scores: CVE-2026-24880 SUSE : 4....
CVE-2026-5307
REJECT DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
Fedora: Security Advisory (FEDORA-2026-36594550b0)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Oracle Linux 10 : nodejs24 (ELSA-2026-7675)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-7675 advisory. 1:24.14.1-2.0.2 - Rebuild to correct NVR 1:24.14.1-2.0.1 - Update upstream references Tenable has extracted the preceding description block directly...
The vulnerability of the stageSandboxMedia() function in the AI agent OpenClaw (previously ClawdBot or MoltBot) allows a violator to write any files they want.
The vulnerability of the stageSandboxMedia function in the AI agent OpenClaw previously ClawdBot or MoltBot is related to an incorrect definition of symbolic references before accessing a file. Exploiting this vulnerability allows a hacker to write arbitrary files...
Fedora: Security Advisory (FEDORA-2026-868e266938)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2026-44338
Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.18-rc1 through 7.0 Description A use-after-free issue exists in the Direct Rendering Manager DRM GEM subsystem due to a race condition in the change handle function. The ioctl briefly associates a single object with two...
CLEANSTART-2026-QM31011 In libexpat before 2
Multiple security vulnerabilities affect the apache-zookeeper package. In libexpat before 2. See references for individual vulnerability details...
WordPress plugin Tutor LMS – eLearning and online course solution 安全漏洞
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...
CLEANSTART-2026-JM69747 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1
Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-AV56399 Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 25.10.0-r1
Multiple security vulnerabilities affect the gpu-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OZ32100 Security fixes for ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-fghv-69vj-qj49, ghsa-prj3-ccx8-p6x4, ghsa-xq3w-v528-46rv applied in versions: 0.12.0-r16
Multiple security vulnerabilities affect the kserve-modelmesh package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-HM40094 filippo
Multiple security vulnerabilities affect the jitsucom-bulker package. filippo. See references for individual vulnerability details...
CLEANSTART-2026-IN87004 In libexpat before 2
Multiple security vulnerabilities affect the apache-zookeeper package. In libexpat before 2. See references for individual vulnerability details...
CLEANSTART-2026-CD13174 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the prometheus package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-NG28268 gRPC-Go is the Go language implementation of gRPC
Multiple security vulnerabilities affect the prometheus package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...