1224 matches found
ROOT-OS-ALPINE-321-CVE-2026-9545 CVE-2026-9545 in curl - Patched by Root
Root has patched CVE-2026-9545 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2021-47658 CVE-2021-47658 in linux - Patched by Root
Root has patched CVE-2021-47658 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-ALPINE-321-CVE-2026-6846 CVE-2026-6846 in binutils - Patched by Root
Root has patched CVE-2026-6846 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available...
ROOT-OS-ALPINE-321-CVE-2026-3442 CVE-2026-3442 in binutils - Patched by Root
Root has patched CVE-2026-3442 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available...
ROOT-OS-ALPINE-321-CVE-2025-5245 CVE-2025-5245 in binutils - Patched by Root
Root has patched CVE-2025-5245 in the binutils package for Root:Alpine:3.21. Multiple fixed versions available...
CVE-2026-16041 MStore API < 4.21.0 - Unauthenticated Product Review Creation
The MStore API WordPress plugin before 4.21.0 does not perform authorization or purchase-ownership checks on its REST product-review creation route, allowing an unauthenticated attacker to create WooCommerce product reviews with an attacker-chosen reviewer name, email and star rating on stores...
ROOT-OS-ALPINE-321-CVE-2025-70873 CVE-2025-70873 in sqlite - Patched by Root
Root has patched CVE-2025-70873 in the sqlite package for Root:Alpine:3.21. Multiple fixed versions available...
MiracleLinux 8 : java-21-openjdk-21.0.12.0.8-1.1.el8.ML.1 (AXSA:2026-1475:08)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1475:08 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK:...
CLSA-2026-1785965552 TuxCare security update for org.springframework.security (4 CVEs)
TuxCare rebuilt 21 org.springframework.security packages to address 4 CVEs. Fixed in 5.7.14-tuxcare.4...
CLSA-2026-1785921265 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 21 org.springframework packages to address 1 CVE. Fixed in 4.3.30.RELEASE-tuxcare.4...
CLSA-2026-1785921094 TuxCare security update for org.springframework.security (1 CVE)
TuxCare rebuilt 21 org.springframework.security packages to address 1 CVE. Fixed in 5.7.12-tuxcare.7...
Security Bulletin: IBM Engineering Lifecycle Management products using WebSphere Application Server Liberty is affected by a denial of service vulnerability due to Eclipse Parsson (CVE-2026-9563)
Summary IBM WebSphere Application Server Liberty is affected by a denial of service with the jsonp-2.1 feature enabled. Following IBM Engineering Lifecycle Management products are vulnerable to this attack, it has been addressed in this bulletin: IBM Engineering Test Management, Global...
Photon OS 5.0: Openjdk21 PHSA-2025-5.0-91-0676
An update of the openjdk21 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0676. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
NPM: Ghost: Member existence leak via magic link sign-in response
NPM: Ghost: Member existence leak via magic link sign-in response vulnerability discovered by ? in WordPress Npm ghost versions = 5.18.0, 6.21.1...
Ghost: Mobiledoc image-size fetch SSRF
Impact When re-rendering posts, Ghost would refetch missing image dimensions by issuing an outbound HTTP request to the URL stored on an image card — without restricting that URL to trusted image hosts. An authenticated staff user able to create or edit posts could therefore point an image card a...
EUVD-2026-39025
Ghost: Private IP filtering bypass to make server-side requests to internal services...
CLSA-2026-1785380498 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 6 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.2...
CLSA-2026-1784769522 TuxCare security update for @babel (2 CVEs)
TuxCare rebuilt 148 @babel packages to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...