23419 matches found
PT-2026-32509
EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have a stored HTML injection vulnerability that allows any authenticated user with standard non-administrative privileges to inject arbitrary HTML into system-generated email notifications by crafting...
PT-2026-32395
Name of the Vulnerable Software and Affected Versions HAProxy versions 2.6 through 3.3.5 Description The HTTP/3 parser fails to verify that the received body length aligns with a previously announced content-length when a stream is closed using a frame with an empty payload. This discrepancy can...
CVE-2026-33555
HAProxy
CVE-2026-33555
An issue was discovered in HAProxy before 3.3.6. The HTTP/3 parser does not check that the received body length matches a previously announced content-length when the stream is closed via a frame with an empty payload. This can cause desynchronization issues with the backend server and could be...
CVE-2025-51414
In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...
CVE-2026-31048
The Pyro v3.x Python remote object invocation library is vulnerable to arbitrary code execution due to a flaw in its pickle protocol . An attacker can achieve this by supplying a crafted pickled string message . While the Nessus document indicates that some Linux distributions may have packages i...
PT-2026-32403
When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted. In Airflow 3.2 we implemented the mechanism that implements token invalidation at logout. Users who are concerned about the logout scenario...
Important: python3.11
Issue Overview: The webbrowser.open API would accept leading dashes in the URL which could be handled as command line options for certain web browsers. New behavior rejects leading dashes. Users are recommended to sanitize URLs prior to passing to webbrowser.open. CVE-2026-4519 Affected Packages:...
Fedora 43 : pdns-recursor (2026-9c582575e5)
The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9c582575e5 advisory. Update to latest 5.2 release, fixing multiple security issues Tenable has extracted the preceding description block directly from the Fedora securit...
[SECURITY] Fedora 42 Update: libmicrohttpd-1.0.3-1.fc42
GNU libmicrohttpd is a small C library that is supposed to make it easy to run an HTTP server as part of another application. Key features that distinguish libmicrohttpd from other projects are: C library: fast and small API is simple, expressive and fully reentrant Implementation is http 1.1...
[SECURITY] Fedora 43 Update: mingw-exiv2-0.28.8-1.fc43
MinGW Windows exiv2 library...
CVE-2026-6106
creationtimestamp| type| source ---|---|--- 2026-04-12 00:02:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjb2eweuut2k 2026-04-12 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116389146135516653 2026-04-12 01:30:41+00:00| seen|...
Fedora 43 : mupdf (2026-7a9c0c8c04)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7a9c0c8c04 advisory. fix CVE-2026-3308 rhbz2454361 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.14: python-unversioned-command-3.14.4-1.hum1 noarch python3-3.14.4-1.hum1 aarch64, x8664 python3-debug-3.14.4-1.hum1 aarch64, x8664 python3-devel-3.14.4-1.hum1 aarch64, x8664...
MINI-QFP5-7FVP-56Q3
Bulletin has no description...
CVE-2026-34070 vulnerabilities
Vulnerabilities for packages: py3-langchain...
GHSA-QH6H-P6C9-FF54 vulnerabilities
Vulnerabilities for packages: py3-langchain...
[SECURITY] [DLA 4527-1] inetutils security update
Debian LTS Advisory DLA-4527-1 [email protected] https://www.debian.org/lts/security/ Andreas Henriksson April 11, 2026 https://wiki.debian.org/LTS Package : inetutils Version : 2:2.0-1+deb11u4 CVE ID : CVE-2026-28372 CVE-2026-32746 CVE-2026-32772 Debian Bug : 1130741 1130742 Several...