CVE-2008-5353 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9...

CVE-2025-7425 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9...

CVE-2008-3106 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9...

CVE-2008-5348 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9...

CVE-2008-5349 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9...

CVE-2009-2672 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9...

CVE-2026-34268 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk, openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9...

CVE-2026-21947 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9...

GHSA-92Q9-FG9G-832C vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9...

GHSA-9GRW-5H83-65P3 vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk, openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9...

GHSA-82JF-VH7J-48RV vulnerabilities

Vulnerabilities for packages: openjdk-26-openj9, openjdk-8-openj9, openjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9, openjdk-25-openj9...

CVE-2026-46400 HAXCMS PHP has a File Upload Validation Bypass

HAX CMS helps manage microsite universe with PHP or NodeJs backends. Starting in version 11.0.6 and prior to version 25.0.0, the file upload functionality in HAXCMS PHP only validates file extensions using a regex pattern without checking the actual file content or MIME type. This allows attacker...

MINI-4V25-HVM2-HP78

Bulletin has no description...

CVE-2026-26378

Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via file upload function in Invoice features...

EUVD-2026-34097

GLPI is a free asset and IT management software package. Starting in version 10.0.4 and prior to version 10.0.25, a technician can store an XSS payload in the asset locked tab. Upgrade to 10.0.25 or 11.0.7 to receive a patch...

CVE-2026-26379

Koha versions up to 25.11 contain a Server-Side Request Forgery SSRF vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform internal network scanning and identify running services by analyzing server response times...

Ubuntu 25.10 / 26.04 LTS : LibreOffice vulnerability (USN-8352-1)

The remote Ubuntu 25.10 / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8352-1 advisory. Duc Anh Nguyen discovered that LibreOffice incorrectly handled mismatched encryption salt parameters in crafted OOXML documents. An attacker could use thi...

PT-2026-45722

LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass group membership checks resulting in unauthorized access to the database...

Seagate openSeaChest 缓冲区错误漏洞

Seagate openSeaChest is a set of cross-platform storage device management tools developed by Seagate Corporation. The version of Seagate openSeaChest v25.05.3 contains a security vulnerability. This vulnerability stems from out-of-bounds writing and reading operations during the --showSCSIDefects...

EUVD-2026-33550

An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the system for CI information. Please note that CMDB has to be anabled and CustomerGroupSupport has to be used to be affected. This issue affects OTRS: 7.0.X...