GHSA-XR3F-844G-572F vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2026-4716 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-7364-G429-CG4V vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-X3F3-63G4-54J4 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2026-4712 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-FMR6-7878-WX6P vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-C97J-HMJ5-572H vulnerabilities

Vulnerabilities for packages: firefox...

GHSA-CJ36-HXHV-2QXH vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

GHSA-GW7X-G9XX-WMM2 vulnerabilities

Vulnerabilities for packages: firefox-esr, firefox...

CVE-2021-27672

SQL Injection in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component...

GHSA-PQ2Q-RCW4-3HR6 vulnerabilities

Vulnerabilities for packages: k3s...

CVE-2026-27889 vulnerabilities

Vulnerabilities for packages: k3s...

CVE-2026-0394

When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path traversal can happen if the domain component is directory partial. This allows inadvertently reading /etc/passwd or some other pa...

[SECURITY] Fedora 43 Update: rust-asn1-0.22.0-1.fc43

ASN.1 DER parser and writer for Rust...

The vulnerability of the wcd938x_mbhc_init() function in the sound module/soc/codecs/wcd938x.c file in Linux operating system-based SoCs allows a hacker to cause a service failure.

The vulnerability of the wcd938xmbhcinit function in the sound module/soc/codecs/wcd938x.c file, which is part of the Linux operating system’s SoC audio support, involves dereferencing an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a system failure...

Clawed and Dangerous: Can We Trust Open Agentic Systems?

Open agentic systems combine LLM-based planning with external capabilities, persistent memory, and privileged execution. They are used in coding assistants, browser copilots, and enterprise automation. OpenClaw is a visible instance of this broader class. Without much attention yet, their securit...

Linux Distros Unpatched Vulnerability : CVE-2025-70888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in mtrojnar Osslsigncode affected at v2.10 and before allows a remote attacker to escalate privileges via the osslsigncode.c component CVE-2025-70888...

Linux Distros Unpatched Vulnerability : CVE-2026-33671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service ReDoS when...

EUVD-2026-16328

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service DoS by causing the system t...

GO-2026-4822 PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systems in github.com/pinchtab/pinchtab

PinchTab: API Bearer Token Exposed in URL Query Parameter via Server Logs and Intermediary Systems in github.com/pinchtab/pinchtab...