468729 matches found
.NET 9.0 security, bug fix, and enhancement update
9.0.121-1.0.1 - Add support for Oracle Linux 9.0.121-1 - Update to .NET SDK 9.0.121 and Runtime 9.0.20 - Resolves: RHEL-252279...
RHEL 10 : .NET 10.0 (RHSA-2026:67530)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:67530 advisory. .NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It...
PT-2026-92298
In gf base update finger base of gf base.c, there is a possible out-of-bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-81923: Missing Authorization
In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. The saveRecord action validated the per-page CSRF token but never called canEditPageProperties for the target page, so a user who was granted access to the bulk SEO tool and...
nginx:1.24 security update
1.24.0-7.5.0.1 - Reference oracle-indexhtml within Requires Orabug: 33802044 - Remove Red Hat references Orabug: 29498217 1:1.24.0-7.5 - Resolves: RHEL-212508 - nginx:1.24/nginx: NGINX: Arbitrary code execution via crafted HTTP requests CVE-2026-42533 1:1.24.0-7.4 - Resolves: RHEL-219310 - nginx:...
CVE-2026-83431: Improper Authorization
Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite component: WebUI. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Workbench. Successf...
CVE-2026-78225: Use of Hard-coded Cryptographic Key
A hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard...
PT-2026-92394
In Concrete CMS before 9.5.3, the SEO Bulk Update Meta Tags editor did not check per-page edit permissions before saving. The saveRecord action validated the per-page CSRF token but never called canEditPageProperties for the target page, so a user who was granted access to the bulk SEO tool and...
CVE-2026-87208: Improper Access Control
Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion component: Security. The supported version that is affected is 11.2.26.0.000. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hyperion Financial...
.NET 8.0 security, bug fix, and enhancement update
8.0.131-1.0.1 - Add support for Oracle Linux 8.0.131-1 - Update to .NET SDK 8.0.131 and Runtime 8.0.31 - Resolves: RHEL-252248...
Oracle Linux 9 : ELSA-2026-64824-0: / redis (ELSA-2026-648240)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-648240 advisory. - rebase to 6.2.24 for CVE-2026-66373 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note th...
CLSA-2026-1789427454 TuxCare security update for org.springframework (18 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 18 CVEs. Fixed in 5.3.6-tuxcare.1...
CLSA-2026-1789425652 TuxCare security update for org.apache.kafka (1 CVE)
TuxCare rebuilt 47 org.apache.kafka packages to address 1 CVE. Fixed in 3.2.2-tuxcare.1...
CLSA-2026-1789425190 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 6 CVEs. Fixed in 4.3.30.RELEASE-tuxcare.9...
CVE-2026-81901 Concrete CMS 9.2.0 to 9.5.2 is vulnerable to stored XSS due to missing authorization in the `PUT /pages/{cID}` endpoint
In Concrete CMS 9.2.0 through 9.5.2, the REST API page update endpoint PUT /ccm/api/1.0/pages/cID did not enforce page-property, page-template, or page-type authorization. A user granted only content-editing rights on a page could therefore alter its properties, template, and type through the API...
CVE-2026-81901 Concrete CMS 9.2.0 to 9.5.2 is vulnerable to stored XSS due to missing authorization in the `PUT /pages/{cID}` endpoint
In Concrete CMS 9.2.0 through 9.5.2, the REST API page update endpoint PUT /ccm/api/1.0/pages/cID did not enforce page-property, page-template, or page-type authorization. A user granted only content-editing rights on a page could therefore alter its properties, template, and type through the API...
CLSA-2026-1789416166 TuxCare security update for org.springframework (12 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 12 CVEs. Fixed in 4.3.4.RELEASE-tuxcare.5...
CLSA-2026-1789415531 TuxCare security update for craftcms/cms (1 CVE)
TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 4.18.7-p1+tuxcare...