CLSA-2026-1792486837 TuxCare security update for dompurify (10 CVEs)

TuxCare rebuilt dompurify to address 10 CVEs. Fixed in 3.0.2-tuxcare.3...

CLSA-2026-1792486117 TuxCare security update for dompurify (10 CVEs)

TuxCare rebuilt dompurify to address 10 CVEs. Fixed in 3.0.1-tuxcare.3...

EUVD-2026-104841

A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine...

CVE-2026-111090

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS...

CVE-2026-111090 Improper Signature Verification of Firmware Update Files

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS...

EUVD-2026-104828

A logic error exists in the signature verification routine resulting in acceptance of unauthenticated update and license files.It is necessary to use only the MyStormshield servers to retrieve update files or licenses, or to use automatic verification via SNS...

CVE-2026-111090

A logic error in the signature verification routine allows for the acceptance of unauthenticated update and license files . To mitigate this risk, users should only retrieve updates or licenses from MyStormshield servers or utilize automatic verification via SNS . No specific software versions or...

Apache-RocketMQ-CVE-2023-33246-

CVE-2023-33246: Apache RocketMQ Remote Code Execution OVERVIEW Apache RocketMQ is one of the most popular and widely used distributed messaging and streaming platforms. A command execution vulnerability has been recently reported in Apache RocketMQ affecting version 5.1.0 and below. A remote...

CLSA-2026-1792473368 TuxCare security update for ip-address (3 CVEs)

TuxCare rebuilt ip-address to address 3 CVEs. Fixed in 10.5.1-tuxcare.1...

WordPress PayPal Pro <1.1.65 - SQL Injection

WordPress PayPal Pro plugin before 1.1.65 is susceptible to SQL injection via the 'query' parameter which allows for any unauthenticated user to perform SQL queries with the results output to a web page in JSON format. id: CVE-2020-14092 info: name: WordPress PayPal Pro 1.1.65 - SQL Injection...

Citrix - Local File Inclusion

Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 are vulnerable to local file inclusion because they allow unauthenticated access to certain URL endpoints. id:...

VMware vRealize Log Insight - Path Traversal

he vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system of an impacted appliance which can result in remote code execution. id: CVE-2022-31706 info: name: VMware vRealize Log Insight - Path Traversal...

Qlik Sense Enterprise - HTTP Request Smuggling

An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August 2022 Patch 12 and earlier allows a remote attacker to elevate their privilege by tunnelin...

CLSA-2026-1792457916 TuxCare security update for @babel/plugin-syntax-export-default-from (2 CVEs)

TuxCare rebuilt @babel/plugin-syntax-export-default-from to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

CLSA-2026-1792457909 TuxCare security update for @babel/plugin-syntax-export-default-from (1 CVE)

TuxCare rebuilt @babel/plugin-syntax-export-default-from to address 1 CVE. Fixed in 7.18.9-tuxcare.3...

CLSA-2026-1792457908 TuxCare security update for @babel/plugin-syntax-export-default-from (1 CVE)

TuxCare rebuilt @babel/plugin-syntax-export-default-from to address 1 CVE. Fixed in 7.21.5-tuxcare.1...

CLEANSTART-2026-EH37235 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources

Security vulnerability affects the grafana-fips package. If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources...

CLSA-2026-1792455098 TuxCare security update for @babel/helper-member-expression-to-functions (2 CVEs)

TuxCare rebuilt @babel/helper-member-expression-to-functions to address 2 CVEs. Fixed in 7.16.7-tuxcare.2...

PT-2026-119326

Vulnerability in the Oracle iSetup product of Oracle E-Business Suite component: General Ledger Update Transform, Reports. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

Oracle E-Business Suite: CVE-2026-101845: Critical Patch Update

Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Purchasing...