lblfixer_cve_2023_30839

LabelGrup Networks, socio oficial de PrestaShop Módulo para PrestaShop 1.7.8.9 para corregir las vulnerabilidades CVE-2023-30545, CVE-2023-30839 y CVE-2023-30839 Para más información, consulte los siguientes enlaces: CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-30545 CVE:...

EUVD-2026-42968

Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover...

netty-http-check

netty-http-check Offline checker for the 14io.netty:netty-codec-http CVEs 2025–2026. Tells you which ones you are actually exposed to — and the single version that clears all of them: 4.1.137.Final / 4.2.17.Final, a number written on none of the fourteen advisories. CVE-2025-58056 · CVE-2025-6773...

CVE-2026-61712 affecting package moby-engine for versions less than 25.0.3-20

CVE-2026-61712 affecting package moby-engine for versions less than 25.0.3-20. A patched version of the package is available...

CVE-2026-70409 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-70409 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-63383 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63383 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63385 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63385 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CLEANSTART-2026-KP84275 Security fixes in weaviate-fips 1.38.11-r2

Package weaviate-fips version 1.38.11-r2 fixes 8 vulnerabilities: CVE-2026-56860, CVE-2026-56858, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853...

EUVD-2026-42297

Portainer has Unauthenticated Restore Endpoint that Allows Admin Takeover on Uninitialized Instances...

CVE-2026-81722

nltk PorterStemmer in versions = 3.10.2 fixed in 3.10.3 contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem. The isconsonant helper walks backward over the entire run of trailing 'y' characters on every call, and measure invokes it for each stem position, causin...

EUVD-2026-42395

Plate: Media embed provider metadata can bypass URL sanitization and execute iframe JavaScript...

EUVD-2026-53582

praisonaiagents has a webcrawl SSRF protection bypass via unchecked redirect targets...

Astra Linux – Vulnerability in Git

Git is a revision control system. Before versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, feeding specially crafted input to git apply --reject could cause a path outside the working tree to be overwritten with partially controlled contents...

CVE-2026-64652 affecting package gh for versions less than 2.97.0-1

CVE-2026-64652 affecting package gh for versions less than 2.97.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14673 affecting package postgresql for versions less than 16.15-1

CVE-2026-14673 affecting package postgresql for versions less than 16.15-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-55558

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.starttls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol.buffer. An active network attacker can place attacker-chosen SMTP...

CVE-2026-70462 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70462 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1

CVE-2026-70460 affecting package rsync for versions less than 3.5.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-15308 affecting package python3 for versions less than 3.12.14-1

CVE-2026-15308 affecting package python3 for versions less than 3.12.14-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-73070 affecting package vim for versions less than 9.2.0957-1

CVE-2026-73070 affecting package vim for versions less than 9.2.0957-1. An upgraded version of the package is available that resolves this issue...