50803 matches found
PT-2026-54949
The WP Review Slider Pro plugin for WordPress is vulnerable to SQL Injection via the 'notinstring' parameter of the wprp load more revs AJAX action in versions up to, and including, 12.7.2. The parameter is read via $ POST'notinstring' and passed through sanitize text field — which strips HTML an...
PT-2026-55393
Am I affected You are affected if: 1. You run zebrad up to and including v4.4.1. 2. Your node accepts inbound P2P connections and is syncing or catching up to the chain tip. Summary A malicious peer can answer Zebra's outbound getblocks/FindBlocks request with a small two-hash inventory, then ser...
PT-2026-55005
Unauthenticated Cross Site Scripting XSS in ChatBot = 8.3.2 versions...
PT-2026-54961
Name of the Vulnerable Software and Affected Versions Unicamp versions prior to 2.2.3 Description A SQL Injection issue exists where users with subscriber-level access can extract sensitive data. This occurs due to improper handling of input in the subscriber module, allowing an attacker to execu...
ROS-20260702-73-0029
The vulnerability of the ext2setsize function in the fs/ext2/inode.c module of the Linux kernel file system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the...
PT-2026-55031
Unauthenticated Cross Site Request Forgery CSRF in Werkstatt = 4.7.2 versions...
TencentOS Server 2: audiofile (TSSA-2025:1025)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:1025 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
TencentOS Server 2: konsole (TSSA-2025:1022)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:1022 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
UBUNTU-CVE-2026-20244
A vulnerability in the DMG file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition, or possibly other expanded impacts, resulting from memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in DMG...
PT-2026-55875
Name of the Vulnerable Software and Affected Versions PHP version 8.2 Description A failure to establish a TLS handshake the process where a client and server authenticate each other and establish encryption keys with a remote server can lead to a Denial of Service DoS condition. Recommendations ...
TencentOS Server 2: libsoup (TSSA-2026:0588)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0588 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
PT-2026-55344
Summary An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints utilizing API Platform. Under certain conditions, roles configured with owner-scope restrictions such as viewown or editown are not properly enforced. This allows low-privilege authenticated API users to bypass...
TencentOS Server 2: 389-ds-base (TSSA-2026:0585)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0585 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
Security update for openbabel (critical)
openSUSE security update: security update for openbabel ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21190-1 Rating: critical References: bsc1217676 bsc1258501 bsc1258507 bsc1259041 Cross-References: CVE-2022-37331 CVE-2022-41793 CVE-2022-42885...
MozillaThunderbird-140.12.1-1.1 on GA media (moderate)
MozillaThunderbird-140.12.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11164-1 Rating: moderate Cross-References: CVE-2026-57962 CVE-2026-57963 CVSS scores: CVE-2026-57962 SUSE : 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2026-57963 SUSE : 6.5...
OPENSUSE-SU-2026:11175-1 kernel-devel-7.1.2-1.1 on GA media
These are all security issues fixed in the kernel-devel-7.1.2-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE SLES15 Security Update : nodejs22 (SUSE-SU-2026:2695-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2695-1 advisory. - CVE-2026-48618: tls: normalize hostname for server identity checks bsc1268593. - CVE-2026-48933: crypto: guard WebCrypto cipher...
SUSE SLED15: docker / docker-bash-completion / docker-buildx / etc (SUSE-SU-2026:2692-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2692-1 advisory. This update for docker fixes the following issues - CVE-2026-33814: golang.org/x/net/http2: infinite loop in...
