469334 matches found
CVE-2026-90499
A vulnerability in lenve vhr 1.0-SNAPSHOT affects the Password Update Handler component, specifically the HrInfoController.updatePass function in the /hr/pass file. The root cause is improper authorization resulting from manipulation of the hrid argument, allowing a remote attacker with low privi...
CVE-2026-90499 lenve vhr Password Update pass HrInfoController.updatePass improper authorization
A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of the component Password Update Handler. The manipulation of the argument hrid results in improper authorization. The attack can be executed remotely. The...
[SECURITY] Fedora 45 Update: libpcap-1.10.7-1.fc45
Libpcap provides a portable framework for low-level network monitoring. Libpcap can provide network statistics collection, security monitoring and network debugging. Since almost every system vendor provides a different interface for packet capture, the libpcap authors created this...
[SECURITY] Fedora 45 Update: golang-x-perf-0-0.36.20260904git19be9d8.fc45
This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...
[SECURITY] Fedora 45 Update: pdns-recursor-5.4.6-2.fc45
PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...
[SECURITY] Fedora 45 Update: php-pecl-mongodb2-2.5.2-1.fc45
The purpose of this driver is to provide exceptionally thin glue between MongoDB and PHP, implementing only fundemental and performance-critical components necessary to build a fully-functional MongoDB driver...
[SECURITY] Fedora 45 Update: mongo-c-driver-2.5.2-1.fc45
mongo-c-driver is a client library written in C for MongoDB...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000581)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000581 advisory. Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. Tenable has extracted the preceding description block directly from the Unity Linu...
PT-2026-90861
A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...
PT-2026-90800
Name of the Vulnerable Software and Affected Versions lenve vhr version 1.0-SNAPSHOT Description An improper authorization issue exists in the Password Update Handler component. A remote attacker can manipulate the hrid argument within the HrInfoController.updatePass function of the '/hr/pass'...
Fedora 45 : rust-hickory-net / rust-hickory-proto / rust-hickory-resolver (2026-37e598af67)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-37e598af67 advisory. Update hickory-dns crates to version 0.26.2. This includes fixes for a large number of security relevant bugs. Release notes:...
CVE-2026-90524: Missing Authentication for Critical Function
A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...
python315-3.15.0~rc2-1.1 on GA media (moderate)
python315-3.15.0rc2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11748-1 Rating: moderate Cross-References: CVE-2026-15310 CVE-2026-15806 CVE-2026-17084 CVE-2026-18503 CVE-2026-19672 CVE-2026-6879 CVE-2026-9669 CVSS scores: CVE-2026-15310 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A...
chromedriver-153.0.8010.36-1.1 on GA media (moderate)
chromedriver-153.0.8010.36-1.1 on GA media Announcement ID: openSUSE-SU-2026:11750-1 Rating: moderate Cross-References: CVE-2026-87429 CVE-2026-87430 CVE-2026-87431 CVE-2026-87432 CVE-2026-87433 CVE-2026-87434 CVE-2026-87435 CVE-2026-87436 CVE-2026-87437 CVE-2026-87438 CVE-2026-87439 CVE-2026-874...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000583)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000583 advisory. Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security...
CVE-2026-90499: Improper Authorization
A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of the component Password Update Handler. The manipulation of the argument hrid results in improper authorization. The attack can be executed remotely. The...
perl-HTML-FormHandler-0.410.2-1.1 on GA media (moderate)
perl-HTML-FormHandler-0.410.2-1.1 on GA media Announcement ID: openSUSE-SU-2026:11745-1 Rating: moderate Cross-References: CVE-2022-4993 CVE-2026-19872 CVE-2026-85484 CVE-2026-85485 CVE-2026-85630 Affected Products: openSUSE Tumbleweed An update that solves 5 vulnerabilities can now be installed...
CLSA-2026-1789228568 TuxCare security update for io.netty (2 CVEs)
TuxCare rebuilt 47 io.netty packages to address 2 CVEs. Fixed in 4.1.119.Final-tuxcare.3...