12845 matches found
PT-2026-20557
Name of the Vulnerable Software and Affected Versions Fileflows versions prior to 25.05.2 Description Fileflows is affected by an authenticated SQL injection issue in the library-file search function. Exploitation of this issue requires the system to utilize MySQL as the underlying database...
CVE-2026-25087
creationtimestamp| type| source ---|---|--- 2026-02-17 17:55:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mf354mpj2z2s 2026-02-21 09:49:35+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mfedubppfo2p...
CredShields Contributes to OWASP’s 2026 Smart Contract Security Priorities
SINGAPORE, Singapore, 17th February 2026, CyberNewswire...
RHSA-2026:2783 Red Hat Security Advisory: nodejs:20 security update
Bulletin has no description...
RHSA-2026:2767 Red Hat Security Advisory: nodejs:20 security update
Bulletin has no description...
RHSA-2026:2768 Red Hat Security Advisory: nodejs:20 security update
Bulletin has no description...
Important: Red Hat Security Advisory: nodejs:24 security update
An update for the nodejs:24 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Important: Red Hat Security Advisory: nodejs:22 security update
An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Important: Red Hat Security Advisory: nodejs:20 security update
An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
nodejs: Nodejs file permissions bypass
A flaw in Node.js’s Permissions model allows attackers to bypass --allow-fs-read and --allow-fs-write restrictions using crafted relative symlink paths. By chaining directories and symlinks, a script granted access only to the current directory can escape the allowed path and read sensitive files...
Important: Red Hat Security Advisory: nodejs:20 security update
An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
Security update for nodejs22 (important)
openSUSE security update: security update for nodejs22 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20236-1 Rating: important References: bsc1256569 bsc1256570 bsc1256571 bsc1256573 bsc1256574 bsc1256576 bsc1256848 Cross-References: CVE-2025-5513...
Ubuntu: Security Advisory (USN-8025-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 Security Update : kernel (Live Patch 28 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:0535-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0535-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150500.55.113 fixes various security issues The following security issues were fixed: ...
CVE-2026-2006 affecting package postgresql for versions less than 14.21-1
CVE-2026-2006 affecting package postgresql for versions less than 14.21-1. An upgraded version of the package is available that resolves this issue...
CVE-2025-71222
A flaw was found in the Linux kernel's wifi: wlcore component. A local attacker with low privileges could exploit a vulnerability related to insufficient skb socket buffer headroom before a skbpush operation within the wl1271txwork function. This could lead to an skbunderpanic kernel panic,...
CVE-2026-1333
A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file...
RHEA-2025:4782 Red Hat Enhancement Advisory: OpenShift Container Platform 4.20.z packages update
Bulletin has no description...
CVE-2026-23133
A flaw was found in the Linux kernel's ath10k Wi-Fi driver. This memory management bug occurs during the copy engine ring teardown process, where the driver incorrectly frees Direct Memory Access DMA coherent buffers. A local attacker with low privileges could exploit this by triggering the flawe...
