249064 matches found
USN-8604-1 linux-azure-6.17 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...
USN-8604-1: Linux kernel (Azure) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP FOU; - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Drivers...
CVE-2026-49743
Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs. During workload submission involving a fence exported by the GPU driver, the reference count of the underlyin...
Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli System Automation Application Manager (CVE-2026-11594, CVE-2026-11707, CVE-2026-11383)
Summary IBM WebSphere Application Server is used by IBM Tivoli System Automation Application Manager and is vulnerable to cross-site scripting. Required updates for affected WebSphere Application Server has been published in the security bulletin links below. Vulnerability Details...
CVE-2026-24727 SUNNET Corporate Training Management System - Unrestricted Upload of File with Dangerous Type
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive...
CVE-2026-24727
An unrestricted upload of file with dangerous type vulnerability in the e-paper draft upload function of SUNNET Corporate Training Management System through v10.3 allows remote authenticated users with administrator privileges to execute arbitrary commands by uploading a crafted ZIP archive...
CVE-2026-50289 vulnerabilities
Vulnerabilities for packages: homepage, opentelemetry-auto-instrumentations-node...
CVE-2026-56745 vulnerabilities
Vulnerabilities for packages: apache-pulsar, tez, druid, management-api-for-apache-cassandra-5.0, zipkin, logstash, infinispan, strimzi-kafka-operator, akhq, apache-nifi, apicurio-registry, apache-activemq-artemis, cloudwatch-exporter, spark, flyway, kserve-modelmesh, thingsboard, wavefront-proxy...
HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()
...
EUVD-2026-48487
Rapid7 InsightVM, Nexpose, and the Insight Agent execute discovered executables during authenticated assessment without validating file ownership, allowing a local low-privileged user to run code as the scan credential Scan Engine or as root/SYSTEM Insight Agent. Fixed in Scan Engine content...
OESA-2026-3151 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
OESA-2026-3150 sssd security update
Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable back end system to connect to multiple different account sources. It is also the basis to provide client auditing and policy...
OESA-2026-3118 gnutls security update
GnuTLS is a secure communications library implementing the SSL, TLS and DTLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols as well as APIs to parse and write X.509, PKCS 12, and other...
GHSA-35RM-7J9C-2F7M vulnerabilities
Vulnerabilities for packages: zed...
GHSA-P9J2-GV94-2WF4 vulnerabilities
Vulnerabilities for packages: langfuse-fips, jitsucom-jitsu, langfuse, keep-fips, homepage, peerdb-ui, keep...
GHSA-Q8WF-6R8G-63CH vulnerabilities
Vulnerabilities for packages: langfuse-fips, jitsucom-jitsu, langfuse, keep-fips, homepage, peerdb-ui, keep...
SUSE CVE-2026-56684
unknown...
SUSE CVE-2026-63728
Gitleaks prior to 8.30.1 contains a template injection vulnerability that allows attackers who can supply or influence report templates to read arbitrary environment variables and exfiltrate sensitive data by leveraging non-hermetic Sprig template functions. Attackers can craft malicious report...
EUVD-2026-48438
Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controller that allows unauthenticated remote attackers to read arbitrary files by supplying directory traversal sequences in the path query parameter. Attackers can send a single unauthenticated HTTP GET...
