SUSE SLES15 Security Update : kernel (Live Patch 5 for SUSE Linux Enterprise 15 SP7) (SUSE-SU-2026:1099-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1099-1 advisory. This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.19 fixes various security issues The following security issues were fixed: -...

PT-2026-28790

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /newsletter/image/images API endpoint is vulnerable to path traversal, allowing unauthenticated attackers to read arbitrary files from the application server's filesystem. This issue has be...

PT-2026-28789

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /pms image proxy endpoint accepts a user-supplied img parameter and forwards it to Plex Media Server's /photo/:/ transcode transcoder without authentication and without restricting the sche...

GHSA-R9W3-57W2-GCH2 vulnerabilities

Vulnerabilities for packages: hydra...

GHSA-H895-88FJ-H89R vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-CJ36-HXHV-2QXH vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-6Q85-P5CM-28VF vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-X3F3-63G4-54J4 vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-PM4J-PMQR-8GQ4 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-R67F-XMR7-94CC vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-VCPC-FV28-PPG5 vulnerabilities

Vulnerabilities for packages: firefox, firefox-esr...

GHSA-GRG2-63FW-F2QR vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9, tritonserver-backend-vllm-cuda-13.0...

NEC Platforms Aterm Series 安全漏洞

The NEC Platforms Aterm Series is a series of wireless router and network device products developed by the Japanese company NEC. The NEC Platforms Aterm Series contains security vulnerabilities, particularly related to path traversal, which may allow attackers to overwrite arbitrary files...

NEC Platforms Aterm Series 安全漏洞

The NEC Platforms Aterm Series is a series of wireless router and network device products developed by the Japanese company NEC. The NEC Platforms Aterm Series contains security vulnerabilities, which stem from hidden features that may allow attackers to enable Telnet...

freerdp security update

2:2.2.0-5.0.3 - Fixed CVE-2026-22855 CVE-2026-22858 CVE-2026-22859 Orabug: 39075086 2:2.2.0-5.0.1 - fixed CVE-2026-23530 CVE-2026-23531 CVE-2026-23532 CVE-2026-23533 CVE-2026-23884 Orabug: 38971897 2:2.2.0-5 - Update: Refactored RPC gateway parser rhbz2017944 + fix issues discovered by Covscan...

handlebars 安全漏洞

Handlebars is a semantic web template system. Versions of Handlebars 4.7.8 and earlier contain security vulnerabilities. These vulnerabilities stem from the resolvePartial function, which does not prevent prototype chain traversal. This can lead to prototype pollution, thereby enabling...

MingSoft MCMS 安全漏洞

MingSoft MCMS is a modular content management framework developed by MingSoft Corporation in China. Versions of MingSoft MCMS 5.5.0 and earlier contained security vulnerabilities. These vulnerabilities were caused by improper handling of the parameter “catchimage” in the file...

MingSoft MCMS 安全漏洞

MingSoft MCMS is a fully open-source J2EE system developed by MingSoft Corporation. Versions of MingSoft MCMS 5.5.0 and earlier contain security vulnerabilities. These vulnerabilities stem from improper handling of the net/mingsoft/cms/action/web/ContentAction.java file, which may lead to SQL...

Open WebUI 安全漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.8.6 contained security vulnerabilities; these vulnerabilities stemmed from the file name field in the speech-to-text endpoint, which could lead to information leakag...

UltraVNC 安全漏洞

UltraVNC is an open-source remote terminal control software developed by UltraVNC Inc. for the Windows platform. Versions of UltraVNC 1.6.4.0 and earlier contain security vulnerabilities, which stem from uncontrolled search paths in the library version.dll...