472978 matches found
CVE-2026-84677
The Jenkins update-center2 tool (version 3.18.3 and earlier ) contains a stored cross-site scripting (XSS) vulnerability. The root cause is the failure to escape plugin-provided values, specifically plugin names, descriptions, and version metadata , when rendering plugin download index pages. Thi...
CVE-2026-84650
In Jenkins 2.579 and earlier (including LTS 2.568.2 and earlier ), a vulnerability exists where transient fields cannot be excluded from deserialization. This allows an attacker to submit configuration updates that specify values for these transient fields during deserialization, with the impact ...
CLSA-2026-1788363279 TuxCare security update for org.springframework (9 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 9 CVEs. Fixed in 5.3.37-tuxcare.10...
CLSA-2026-1788361436 TuxCare security update for org.springframework (13 CVEs)
TuxCare rebuilt 23 org.springframework packages to address 13 CVEs. Fixed in 5.2.13.RELEASE-tuxcare.10...
CLSA-2026-1788361406 TuxCare security update for org.springframework (21 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 21 CVEs. Fixed in 6.0.0-tuxcare.1...
CVE-2025-15485
CVE-2025-15485 affects the Auto x LINE WordPress plugin through version 1.0.0 . The plugin lacks authorization checks on certain REST API endpoints , enabling unauthenticated users to invoke them and update plugin settings or clear logs . The vulnerability carries a CVSS v3.1 score of 8.2 (HIGH) ...
CLSA-2026-1788359035 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 3.7.18-tuxcare.7...
CLSA-2026-1788358728 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (5 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 5 CVEs. Fixed in 2.14.1-tuxcare.1...
OPENSUSE-SU-2026:21742-1 Security update for lkl
This update for lkl fixes the following issues: Changes in lkl: - Updated to match current kernel...
CLSA-2026-1788357718 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 4.4.13-tuxcare.3...
CLSA-2026-1788355153 TuxCare security update for 2 packages (3 CVEs)
TuxCare rebuilt 2 packages to address 3 CVEs. Fixed in 3.2.0-tuxcare.5...
CLSA-2026-1788354808 TuxCare security update for postcss (2 CVEs)
TuxCare rebuilt postcss to address 2 CVEs. Fixed in 8.2.15-tuxcare.3...
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Virtualizor said hackers used a Border Gateway Protocol BGP hijack to divert Softaculous traffic. The hackers then used the diverted update traffic to deliver a malicious Virtualizor package to some installations. A hosting-provider account separately said 5 of its 34 checked Virtualizor...
ROOT-OS-DEBIAN-12-CVE-2023-6228 CVE-2023-6228 in tiff - Patched by Root
Root has patched CVE-2023-6228 in the tiff package for Root:Debian:12. Multiple fixed versions available...
OPENSUSE-SU-2026:21788-1 Security update for lxd
This update for lxd fixes the following issues: Changes in lxd: - update to 5.21.6: bsc1274937, CVE-2026-63293, bsc1274936, CVE-2026-62420, bsc1274954, CVE-2026-63295, bsc1274963, CVE-2026-63297, bsc1274961, CVE-2026-63296, bsc1275085, CVE-2026-63299, bsc1275084, CVE-2026-63298, bsc1275090,...
CLSA-2026-1788351524 TuxCare security update for com.fasterxml.jackson.core:jackson-core (1 CVE)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-core to address 1 CVE. Fixed in 2.14.1-tuxcare.1...
ROOT-OS-DEBIAN-13-CVE-2026-34543 CVE-2026-34543 in openexr - Patched by Root
Root has patched CVE-2026-34543 in the openexr package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-34544 CVE-2026-34544 in openexr - Patched by Root
Root has patched CVE-2026-34544 in the openexr package for Root:Debian:11. Multiple fixed versions available...