CLSA-2026-1789289706 TuxCare security update for fast-xml-parser (1 CVE)

TuxCare rebuilt fast-xml-parser to address 1 CVE. Fixed in 4.5.1-tuxcare.1...

CLSA-2026-1789288364 TuxCare security update for org.springframework.data:spring-data-redis (1 CVE)

TuxCare rebuilt org.springframework.data:spring-data-redis to address 1 CVE. Fixed in 3.3.13-tuxcare.5...

CLSA-2026-1789286187 TuxCare security update for org.springframework.data (1 CVE)

TuxCare rebuilt 3 org.springframework.data packages to address 1 CVE. Fixed in 4.3.13-tuxcare.5...

CLSA-2026-1789286115 TuxCare security update for org.springframework.data (1 CVE)

TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 3.3.13-tuxcare.5...

CLSA-2026-1789285409 TuxCare security update for org.springframework.data:spring-data-ldap (1 CVE)

TuxCare rebuilt org.springframework.data:spring-data-ldap to address 1 CVE. Fixed in 3.3.13-tuxcare.5...

CLSA-2026-1789285402 TuxCare security update for org.springframework.data:spring-data-keyvalue (1 CVE)

TuxCare rebuilt org.springframework.data:spring-data-keyvalue to address 1 CVE. Fixed in 3.3.13-tuxcare.5...

CVE-2026-90499

A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of the component Password Update Handler. The manipulation of the argument hrid results in improper authorization. The attack can be executed remotely. The...

EUVD-2026-76971

A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of the component Password Update Handler. The manipulation of the argument hrid results in improper authorization. The attack can be executed remotely. The...

CVE-2026-90499 lenve vhr Password Update pass HrInfoController.updatePass improper authorization

A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of the component Password Update Handler. The manipulation of the argument hrid results in improper authorization. The attack can be executed remotely. The...

CVE-2026-90499

A vulnerability in lenve vhr 1.0-SNAPSHOT affects the Password Update Handler component, specifically the HrInfoController.updatePass function in the /hr/pass file. The root cause is improper authorization resulting from manipulation of the hrid argument, allowing a remote attacker with low privi...

[SECURITY] Fedora 45 Update: libpcap-1.10.7-1.fc45

Libpcap provides a portable framework for low-level network monitoring. Libpcap can provide network statistics collection, security monitoring and network debugging. Since almost every system vendor provides a different interface for packet capture, the libpcap authors created this...

[SECURITY] Fedora 45 Update: golang-x-perf-0-0.36.20260904git19be9d8.fc45

This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...

[SECURITY] Fedora 45 Update: pdns-recursor-5.4.6-2.fc45

PowerDNS Recursor is a non authoritative/recursing DNS server. Use this package if you need a dns cache for your network...

[SECURITY] Fedora 45 Update: php-pecl-mongodb2-2.5.2-1.fc45

The purpose of this driver is to provide exceptionally thin glue between MongoDB and PHP, implementing only fundemental and performance-critical components necessary to build a fully-functional MongoDB driver...

[SECURITY] Fedora 45 Update: mongo-c-driver-2.5.2-1.fc45

mongo-c-driver is a client library written in C for MongoDB...

CVE-2026-90524: Missing Authentication for Critical Function

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

PT-2026-90800

Name of the Vulnerable Software and Affected Versions lenve vhr version 1.0-SNAPSHOT Description An improper authorization issue exists in the Password Update Handler component. A remote attacker can manipulate the hrid argument within the HrInfoController.updatePass function of the '/hr/pass'...

PT-2026-90861

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000581)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000581 advisory. Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.4440. Tenable has extracted the preceding description block directly from the Unity Linu...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2022-000583)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000583 advisory. Stack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2. Tenable has extracted the preceding description block directly from the Unity Linux security...