479487 matches found
SUSE CVE-2026-67182
Rouille 0.3.3 through 3.6.2 contains an HTTP request smuggling vulnerability that allows remote attackers to bypass access controls by injecting bare line feed characters 0x0A into client-supplied request header values that are copied verbatim to upstream connections without validation. Attackers...
EUVD-2026-53677
A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path. The issue occurs because FileSegmentencode validates only the standalone segment length via FileSegmentGetMaxDataSize and does not verify the residual capacity of the current ASDU frame befo...
EUVD-2026-53678
The H5Znbitdecompressonebyte, H5Znbitdecompressonenooptype, and H5Znbitdecompressoneatomic functions in H5Znbit.c in HDF5 through 2.3.0 advance a read index into the compressed chunk buffer without bounding it against the buffer's actual size. This allows attackers to cause an out-of-bounds heap...
EUVD-2026-53670
Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service via the Alarm/Conditions wrapper when processing PublishResponse EventNotificationList data...
DEBIAN-CVE-2026-67869
Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the ServiceCall validates input arguments against runtime-resolved InputArguments metadata...
CVE-2024-39024
In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution...
CVE-2024-39024
CVE-2024-39024 affects PacketFence 13.2.0. The issue is an authenticated remote code execution via the WebGui interface setting, enabling a low-privilege attacker with network access to trigger a compromise. The CVSS v3.1 vector indicates high impact across confidentiality, integrity, and availab...
EulerOS 2.0 SP15 : libxslt (EulerOS-SA-2026-2897)
According to the versions of the libxslt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the exsltFuncResultComp function of libxslt, which handles EXSLT func:result elements during stylesheet parsing. Due to...
Google Chrome < 151.0.7922.108 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 151.0.7922.108. It is, therefore, affected by multiple vulnerabilities as referenced in the 202608stable-channel-update-for-desktop01193673229 advisory. - Use after free in Skia. CVE-2026-19154, CVE-2026-19176 - Use after...
OPENSUSE-SU-2026:11471-1 tekton-cli-0.46.0-1.1 on GA media
These are all security issues fixed in the tekton-cli-0.46.0-1.1 package on the GA media of openSUSE Tumbleweed...
SUSE SLED15: libwireshark19 / libwiretap16 / libwsutil17 / wireshark / etc (SUSE-SU-2026:3501-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3501-1 advisory. Update to version 4.6.7: - CVE-2026-5299: ICMPv6 dissector crash bsc1263757. - CVE-2026-5401: AFP dissector...
TencentOS Server 3: grafana (TSSA-2026:0805)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0805 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Linux Distros Unpatched Vulnerability : CVE-2026-71310
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.0, the shared HTTP CONNECT helper in...
CVE-2026-67687
The CVE-2026-67687 case concerns ICS-Park Smart Park Management System v2.0 (based on RuoYi). A vertical privilege escalation exists via missing authorization checks in two endpoints: /system/role/save (RoleController.java) and /system/user/update (UserController.java). An authenticated low-privi...
bouncycastle-1.85-1.1 on GA media (moderate)
bouncycastle-1.85-1.1 on GA media Announcement ID: openSUSE-SU-2026:11445-1 Rating: moderate Cross-References: CVE-2026-12185 CVE-2026-12802 CVE-2026-12803 CVE-2026-12816 CVE-2026-12817 CVE-2026-12852 CVE-2026-12860 CVE-2026-13506 CVE-2026-13586 CVE-2026-14682 CVE-2026-15055 CVE-2026-58059...
VulnCheck KEV: CVE-2018-14013
Synacor Zimbra Collaboration Suite Collaboration before 8.8.11 has XSS in the AJAX and html web clients...
EulerOS 2.0 SP15 : mutt (EulerOS-SA-2026-2898)
According to the versions of the mutt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mutt before 2.3.2 sometimes truncates the hashpasswd by one byte for IMAP authcram MD5 digest.CVE-2026-43860 mutt before 2.3.2 has an infinite loop ...
OPENSUSE-SU-2026:11464-1 python313-Django-6.0.8-1.1 on GA media
These are all security issues fixed in the python313-Django-6.0.8-1.1 package on the GA media of openSUSE Tumbleweed...
Stable Channel Update for Desktop
The Stable channel has been updated to 151.0.7922.108/.109 for Windows and Mac and 151.0.7922.108 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...