319364 matches found
Photon OS 5.0: Libtar PHSA-2023-5.0-91-0010
An update of the libtar package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0010. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-20268: Improper Restriction of Operations within the Bounds of a Memory Buffer
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...
NPM: Ghost: Paid gift memberships obtainable at minimal cost via the donations feature
NPM: Ghost: Paid gift memberships obtainable at minimal cost via the donations feature vulnerability discovered by ? in WordPress Npm ghost versions = 6.27.0, 6.44.0...
CVE-2026-70485 Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, Open WebUI checked whether a user-supplied URL destination was globally routable by applying ipaddress.isglobal to the literal IPv6 address without examining IPv4 addresses embedded in...
kin v0.4.8
The diff is not the change. AI agents can write a change faster than a team can establish what it touches, whether it reverses an earlier fix, and how far its consequences reach. Git records files and line history. Kin records the software itself as a graph of entities, relations, changes, and...
Security Bulletin: Multiple vulnerabilities have been identified in IBM® SDK, Java™ Technology Edition, an IBM Websphere (WAS) prerequisite. WAS is used by IBM Rational ClearQuest
Summary IBM® SDK, Java™ Technology Edition is a prerequisite in order to use IBM WebSphere Application ServerWAS. WAS is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM® SDK, Java™ Technology Edition have been published in a security bulletin...
DoS (Denial of Service) immutable Dependency in Jira Software Data Center
This DoS Denial of Service vulnerability was introduced in versions 10.1.1, 10.2.0, 10.3.0, 10.4.1, 10.5.0, 10.6.0, 10.7.1, 11.0.0, and 11.1.0 of Jira Software Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...
Information Disclosure axios Dependency in Jira Software Data Center
This High severity Information Disclosure vulnerability was introduced in versions 10.3.22 and 11.3.7 of Jira Software Data Center. This Information Disclosure vulnerability, with a CVSS Score of 8.3 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT: P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N allows an...
Malicious code in @servicetitan/microfront-tests (npm)
npm/@servicetitan/microfront-tests is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @servicetitan/acquisition-functions (npm)
npm/@servicetitan/acquisition-functions is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized...
MAL-2026-11841 Malicious code in @servicetitan/contentful (npm)
npm/@servicetitan/contentful is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
CLSA-2026-1785291207 TuxCare security update for axios (1 CVE)
TuxCare rebuilt axios to address 1 CVE. Fixed in 0.24.0-tuxcare.3...
CLSA-2026-1784596290 TuxCare security update for debug (1 CVE)
TuxCare rebuilt debug to address 1 CVE. Fixed in 2.6.4-tuxcare.1...
CLSA-2026-1784596277 TuxCare security update for qs (2 CVEs)
TuxCare rebuilt qs to address 2 CVEs. Fixed in 2.2.4-tuxcare.1...
CLSA-2026-1784077477 TuxCare security update for symfony/yaml (2 CVEs)
TuxCare rebuilt symfony/yaml to address 2 CVEs. Fixed in v3.4.47-p1+tuxcare...
CLSA-2026-1783645401 TuxCare security update for symfony/routing (2 CVEs)
TuxCare rebuilt symfony/routing to address 2 CVEs. Fixed in v3.4.47-p1+tuxcare...
CLSA-2026-1783558967 TuxCare security update for laravel/framework (1 CVE)
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 9.52.21-p2+tuxcare...
CLSA-2026-1782089809 TuxCare security update for uuid (2 CVEs)
TuxCare rebuilt uuid to address 2 CVEs. Fixed in 3.4.0-tuxcare.2...