12845 matches found
Mozilla Firefox < 147.0.4
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 147.0.4. It is, therefore, affected by a vulnerability as referenced in the mfsa2026-10 advisory. - Heap buffer overflow in libvpx. This vulnerability affects Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR...
Critical Photon OS Security Update - PHSA-2026-5.0-0763
Updates of 'python3-wheel', 'linux', 'python-wheel', 'glib', 'linux-esx', 'openjdk21', 'go' packages of Photon OS have been released...
OPENSUSE-SU-2026:20236-1 Security update for nodejs22
This update for nodejs22 fixes the following issues: Update to 22.22.0: - CVE-2025-55130: file system permissions bypass via crafted symlinks bsc1256569. - CVE-2025-55131: timeout-based race conditions allow for allocations that contain leftover data from previous operations and lead to exposure ...
SUSE-SU-2026:20436-1 Security update for nodejs22
This update for nodejs22 fixes the following issues: Update to 22.22.0: - CVE-2025-55130: file system permissions bypass via crafted symlinks bsc1256569. - CVE-2025-55131: timeout-based race conditions allow for allocations that contain leftover data from previous operations and lead to exposure ...
CVE-2020-37167
ClamAV versions prior to 0.103.0-rc contain a vulnerability in function name processing through the ClamBC bytecode interpreter that allows attackers to manipulate bytecode function names. Attackers can exploit the weak input validation in function name encoding to potentially execute malicious...
OESA-2026-1342 python-django security update
A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fixes: An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. Algorithmic complexity in django.core.serializers.xmlserializer.getInnerText allows a remote...
CVE-2025-70886
creationtimestamp| type| source ---|---|--- 2026-02-13 09:23:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meq6osbzck2h...
CVE-2026-20655
An authorization issue was addressed with improved state management. This issue is fixed in iOS 18.7.5 and iPadOS 18.7.5, iOS 26.3 and iPadOS 26.3. An attacker with physical access to a locked device may be able to view sensitive user information...
CVE-2026-20642
An input validation issue was addressed. This issue is fixed in iOS 26.3 and iPadOS 26.3. A person with physical access to an iOS device may be able to access photos from the lock screen...
AlmaLinux 8 : nodejs:20 (ALSA-2026:2422)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:2422 advisory. nodejs: Nodejs filesystem permissions bypass CVE-2025-55132 nodejs: Nodejs denial of service CVE-2026-21637 nodejs: Nodejs denial of service CVE-2025-5946...
AlmaLinux 8 : nodejs:24 (ALSA-2026:2420)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:2420 advisory. nodejs: Nodejs filesystem permissions bypass CVE-2025-55132 nodejs: Nodejs denial of service CVE-2026-21637 nodejs: Nodejs denial of service CVE-2025-5946...
postgresql14-14.21-1.1 on GA media (moderate)
postgresql14-14.21-1.1 on GA media Announcement ID: openSUSE-SU-2026:10190-1 Rating: moderate Cross-References: CVE-2026-2003 CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 Affected Products: openSUSE Tumbleweed An update that solves 4 vulnerabilities can now be installed. Description: These are all...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : nginx vulnerability (USN-8038-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8038-1 advisory. It was discovered that nginx incorrectly handled proxying to upstream TLS servers. An attacker could possibly use this issue to insert plain...
Ubuntu 22.04 LTS / 25.10 : .NET vulnerability (USN-8025-1)
The remote Ubuntu 22.04 LTS / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8025-1 advisory. Kevin Jones discovered that the System.Security.Cryptography.Cose component in .NET did not properly handle certain missing special elements in input data...
RockyLinux 9 : java-25-openjdk (RLSA-2026:0933)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:0933 advisory. JDK: Improve JMX connections CVE-2026-21925 JDK: Improve HttpServer Request handling CVE-2026-21933 JDK: Enhance Certificate Checking CVE-2026-21945...
DEBIAN-CVE-2026-2006
Missing validation of multibyte character length in PostgreSQL text manipulation allows a database user to issue crafted queries that achieve a buffer overrun. That suffices to execute arbitrary code as the operating system user running the database. Versions before PostgreSQL 18.2, 17.8, 16.12,...
3D Printer Surveillance
New York is contemplating a bill that adds surveillance to 3D printers: New York’s 20262027 executive budget bill S.9005 / A.10005 includes language that should alarm every maker, educator, and small manufacturer in the state. Buried in Part C is a provision requiring all 3D printers sold or...
CVE-2025-30276
creationtimestamp| type| source ---|---|--- 2026-02-12 11:29:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3menvbacvxg2m...
CVE-2026-2360
creationtimestamp| type| source ---|---|--- 2026-02-12 08:03:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3menjqwkn3c23 2026-02-17 18:34:51+00:00| seen| https://infosec.exchange/users/Sempf/statuses/116087409257975980 2026-02-17 18:35:01+00:00| seen|...
CVE-2026-26234
creationtimestamp| type| source ---|---|--- 2026-02-12 06:59:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3meng6lfjvs2o 2026-02-12 11:30:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3menvco3hyd24 2026-02-12 11:30:38+00:00| seen|...