Astra Linux – vulnerability in Tomcat9

Incomplete Cleanup vulnerability in Apache Tomcat. When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80, and from 8.5.0 through 8.5.93, an error may cause Tomcat to skip certain parts of the...

Astra Linux – vulnerability in Apache2

Buffer over-read vulnerability in Apache HTTP Server caused by outbound OCSP requests to an attacker-controlled OCSP server This issue affects Apache HTTP Server versions 2.4.0 through 2.4.67. Users are advised to upgrade to version 2.4.68, which resolves the issue...

Astra Linux – Vulnerability in requests

The Requests library is an HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function used a predictable filename when extracting files from zip archives into the system’s temporary directory. If the target file already existed, it was reused without validation....

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fixed the link-down processing to address the issue of NULL pointer dereferencing. If a FC link-down transition occurs while PLOGIs are outstanding for fabric-known addresses, outstanding ABTS requests may lead to NUL...

Astra Linux – vulnerability in waitress

Waitress versions up to 1.3.1 would parse the Transfer-Encoding header and look for a single string value; if that value was not chunked, it would fall back to using the Content-Length header instead. According to the HTTP standard, Transfer-Encoding should be a comma-separated list, with the...

Astra Linux – vulnerability in Firefox and Thunderbird

A malicious website could have learned the size of a cross-origin resource that supported Range requests. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

Astra Linux – vulnerability in Thunderbird

When an HTTPS page was embedded within an HTTP page, and a service worker was registered for the former, the service worker could have intercepted the request for the secure page despite the fact that the iframe did not constitute a secure context due to the insecure framing. This vulnerability...

Astra Linux – Vulnerability in Firefox, Thunderbird

Service Workers should not be able to infer information about opaque cross-origin responses; however, timing information for cross-origin media, combined with Range requests, might have allowed them to determine the presence or length of a media file. This vulnerability affects Firefox ESR 102.5,...

SUSE CVE-2026-88829

A flaw was found in BusyBox httpd's reverse proxy feature. When the proxy is configured to forward requests matching a URL prefix to a backend server, only the first HTTP request on a TCP connection has its path rewritten. An attacker can send a pipelined second request that is relayed verbatim t...

CVE-2026-108116

In Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotGrid XMLA transport could alter MDX predicates or inject XML markup into SOAP requests, potentially exposing data accessible through the configured XMLA connection...

EUVD-2026-102080

In Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotGrid XMLA transport could alter MDX predicates or inject XML markup into SOAP requests, potentially exposing data accessible through the configured XMLA connection...

CVE-2026-9703

Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources. A user holding only the Viewer role on an affected Grafana instance could send POST, PUT and DELETE requests through the proxy to the Loki rules API /loki/api/v1/rules, allowing...

Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)

SummaryThe Headroom WebSocket server does not validate the Origin header of incoming client WebSocket requests before forwarding the request to the upstream server, allowing malicious WebSocket clients to perform arbitrary LLM requests without authentication. This can be exploited by a malicious...

CVE-2026-103304

The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the email...

CVE-2026-103304

The eaSYNC Booking WordPress plugin, in versions before 1.3.31 , is vulnerable to an authorization and nonce check deficiency. The flaw resides in several cancellation-related AJAX actions , which allows unauthenticated users to create booking cancellation requests, trigger booking notification e...

CVE-2026-103304 eaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template Update

The eaSYNC Booking WordPress plugin before 1.3.31 does not perform authorization or nonce checks on several of its cancellation-related AJAX actions, allowing unauthenticated users to create booking cancellation requests, trigger booking notification emails, and overwrite the content of the email...

nginx: nginx: heap-based buffer overflow in ngx_http_core_module via alias with rewrite referencing $request_filename

A flaw was found in nginx. A remote, unauthenticated attacker can trigger a heap-based buffer overflow by sending crafted HTTP requests to a server configured with specific alias and rewrite directives that reference the request filename variable. Successful exploitation may allow an attacker to...

CLEANSTART-2026-KZ19518 SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read

CVE-2025-47914 affects multiple packages. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read. See references for individual vulnerability details...

CLEANSTART-2026-UK08664 In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition

Security vulnerability affects the strimzi-kafka-operator package. In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition...

Security Bulletin: TS4500 Tape Library addresses security vulnerability CVE-2025-36061

Summary The Web UI allowed an authenticated user with administrative privileges to generate a large number of email notifications by submitting multiple user creation requests, potentially resulting in email flooding and impacting the readability and usability of recipients' mailboxes. The issue...