319454 matches found
Debian dla-4666 : openvpn - security update
The remote Debian 12 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4666 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4666-1 [email protected]...
Linux Distros Unpatched Vulnerability : CVE-2026-58381
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP's PSP file format parser. A double-free condition occurs in the readlayerblock function when processing a specially crafted PSP file...
CVE-2026-14460: Missing Authorization
Missing Authorization vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection. This issue affects pardus-software: from = 1.0.4 before 1.0.5...
NetComm NF20MESH Unauthorized Access
The vulnerability of the web interface for managing micro-program software on NetComm NF20MESH routers is related to the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
FBI FLASH: Cyber Criminal Group TeamPCP
The Federal Bureau of Investigation FBI is releasing this FLASH to highlight the tactics, techniques, and procedures TTPs and indicators of compromise IOCs associated with the cyber criminal group TeamPCP. TeamPCP actors have conducted large-scale software supply chain compromises by targeting...
PT-2026-55503
Name of the Vulnerable Software and Affected Versions HPLIP affected versions not specified Description An integer overflow exists in the hpcups processing path when handling specially crafted print data. This flaw may allow a remote attacker to escalate privileges or achieve arbitrary code...
GHSA-63WG-WJJJ-7CP8 Zebra Address Book Aborted by IPv4-Mapped Mempool Misbehavior Update
Am I affected You are affected if: 1. You run zebrad up to and including v4.4.1. 2. Your node listens on the default :: address on a Linux host the standard deployment configuration — net.ipv6.bindv6only=0 is the default on all common Linux distributions. 3. Your node is synced near the chain tip...
NPM: 9router: Missing Authorization and OS Command Injection
NPM: 9router: Missing Authorization and OS Command Injection vulnerability discovered by ? in WordPress Npm 9router versions 0.4.44...
NPM: OpenClaw: Combined POSIX shell options could confuse exec revalidation
NPM: OpenClaw: Combined POSIX shell options could confuse exec revalidation vulnerability discovered by ? in WordPress Npm openclaw versions = 2026.5.7...
NPM: OpenClaw: Embedded runner policy could be confused by provider aliases
NPM: OpenClaw: Embedded runner policy could be confused by provider aliases vulnerability discovered by ? in WordPress Npm openclaw versions = 2026.4.24...
Cobbler Arbitrary File Read
A flaw was found in cobbler software component version 2.6.11-1. It suffers from an invalid parameter validation vulnerability, leading the arbitrary file reading. The flaw is triggered by navigating to a vulnerable URL via cobbler-web on a default installation...
MoinMoin Insertion of Sensitive Information into Log File
An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system. MoinMoin administrators can add "showtraceback=0" to their site configurations to disable debug tracebacks...
Nicotine+ DoS on Null Character in Download Request
Denial of service DoS vulnerability in Nicotine+ starting with version 3.0.3 and prior to version 3.2.1 allows a user with a modified Soulseek client to crash Nicotine+ by sending a file download request with a file path containing a null character...
calibre-web is vulnerable to Cross-site Scripting
calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...
Security Bulletin: Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in golang.org/x/net
Summary Automation Assets in IBM Cloud Pak for Integration are vulnerable to vulnerability in golang.org/x/net. CVE-2026-33814 The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-33814 DESCRIPTION: When processing HTTP/2 SETTINGS frames, transport will enter an infinite loo...
CVE-2026-57746
Subscriber Broken Access Control in Booked = 3.0.0 versions...
CVE-2026-27426
Unauthenticated Cross Site Scripting XSS in Automotive Car Dealership Business = 13.3.3 versions...
CVE-2026-27433
Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors: from n/a before 5.6.85...
