2273 matches found
Astra Linux – Vulnerability in imagemagick
ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, the WriteSVGImage function contained a vulnerability where using an integer variable to store numberattributes could lead to integer overflow. This, in turn, triggered a buffe...
Astra Linux – Vulnerability in Squid
Squid is a caching proxy for the Web. Prior to version 7.5, due to heap use-after-free issues, Squid was vulnerable to Denial of Service attacks when handling ICP traffic. This vulnerability allowed a remote attacker to carry out a reliable and repeatable Denial of Service attack on the Squid...
Astra Linux – Vulnerability in tar
GNU Tar version 1.34 has a one-byte out-of-bounds read operation, which allows for the use of uninitialized memory during a conditional jump. Exploitation to alter the control flow has not been demonstrated. The issue occurs in the fromheader section of the list.c file, due to a V7 archive where...
Astra Linux – Vulnerability in LibreOffice
In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7-0 series in versions prior to 7.0.5, the denylist can be circumvented by manipulating the link so that it does not match the denylist, resulting in ShellExecute attempting to launch an executable file...
CVE-2026-21082
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
CVE-2026-21082
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
CVE-2026-21077
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
CVE-2026-21077
Samsung Health is affected by CVE-2026-21077 due to incorrect authorization prior to version 7.0.0, allowing local attackers to access sensitive information. Affected software: Samsung Health (versions
CVE-2026-21076
Samsung Health prior to version 7.0.0 has an incorrect authorization flaw that could allow local attackers to access sensitive information. Affected product: Samsung Health (pre-7.0.0). Root cause: improper access control enabling local access to data. Reported CVSS v4.0 base score 6.9 (MEDIUM) w...
CVE-2026-21076
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
CVE-2026-21076
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
CVE-2026-65542
Unauthenticated Broken Authentication in Super Socializer = 7.14.5 versions...
CVE-2026-66681 WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Theme My Login = 7.1.14 versions...
CVE-2026-66457
CVE-2026-66457 describes an unauthenticated cross-site scripting (XSS) vulnerability in the WordPress Events Manager plugin version ≤ 7.4.1. The issue is identified as an XSS flaw; no root-cause specifics are provided in the documents. Exploitation status and precise impact vectors are not detail...
CVE-2026-18050 Events Manager < 7.4 - Unauthenticated Pending Upload Disclosure via events-manager/v1/uploads
The Events Manager WordPress plugin before 7.4 does not perform any authorization check on a REST route that serves temporarily stored file uploads, allowing unauthenticated users to retrieve another user's in-progress upload when its temporary identifier is known. The identifier is high-entropy,...
Linux Distros Unpatched Vulnerability : CVE-2026-53504
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the convolution filter regular expression performs exponential backtracking on...
CLSA-2026-1785380879 TuxCare security update for 84 packages (1 CVE)
TuxCare rebuilt 84 packages to address 1 CVE. Fixed in 7.0.7-tuxcare.1...
CLSA-2026-1784769522 TuxCare security update for @babel (2 CVEs)
TuxCare rebuilt 148 @babel packages to address 2 CVEs. Fixed in 7.21.5-tuxcare.2...