265921 matches found
GHSA-3FVR-2JW6-CRQ4 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-MJRX-74JH-7XGW vulnerabilities
Vulnerabilities for packages: nextcloud-server...
Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.1.7.1 XP 6.0.5.1 release
JBoss EAP XP 6.0.5.1 release on the EAP 8.1 base. See references for release notes. A security update is now available for Red Hat JBoss Enterprise Application Platform 8.1.7.1, XP 6.0.5.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common...
CVE-2024-5866
creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:04+00:00| seen| https://t.me/purpleshift/133 2026-08-05 00:00:30+00:00| seen| https://t.me/purpleshift/133...
SUSE-SU-2026:3482-1 Security update for netty, netty-tcnative
This update for netty, netty-tcnative fixes the following issues: Upgrade netty to upstream version 4.1.136 and netty-tcnative to version 2.0.80 Final. Security issues fixed - CVE-2026-44891: memory exhaustion in io.netty:netty-codec-stomp bsc1271435. - CVE-2026-55831: resource exhaustion/DoS in...
RHSA-2026:49911 Red Hat Security Advisory: fence-agents security update
Bulletin has no description...
DEBIAN-CVE-2026-64563
In the Linux kernel, the following vulnerability has been resolved: rhashtable: clear stale iter-p on table restart rhashtablewalkstartcheck has two restart paths when resuming a walk. When iter-walker.tbl is valid, it re-validates iter-p against the table and sets iter-p = NULL if the object is...
DEBIAN-CVE-2026-64561
In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Check for invalid/obsolete root after making MMU pages available Check for a "stale" page fault, i.e. for an invalid and/or obsolete root, after making MMU pages available for the shadow MMU. If reclaiming shadow pages...
EUVD-2026-52574
A code injection vulnerability exists in the LINE Android app prior to version 26.7.2. The profile rendering component does not adequately validate or sandbox externally supplied script content embedded in profile templates. As a result, an attacker who is able to place crafted content in a profi...
CVE-2026-14818
A path traversal vulnerability in the CLI command used to execute configuration files in Zyxel ATP series firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patch 1, USG FLEX 50W series firmware versions from V4.16 through V5.42 Patch 1,...
CVE-2026-3093 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng-fips, gitlab-cng, gitlab-workhorse-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce...
GHSA-45H8-QRQH-XR5V vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng-fips, gitlab-cng, gitlab-workhorse-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce...
GHSA-86R3-Q889-HVG2 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng-fips, gitlab-cng, gitlab-workhorse-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce...
GHSA-35PC-QWV6-4858 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng-fips, gitlab-cng, gitlab-workhorse-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce...
GHSA-94P8-87FF-W336 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng-fips, gitlab-cng, gitlab-workhorse-ce-fips, gitlab-runner-fips, gitlab-workhorse-ce...
SUSE SLES15: java-11-openjdk / java-11-openjdk-demo / java-11-openjdk-devel / etc (SUSE-SU-2026:3453-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3453-1 advisory. Upgrade to upstream tag jdk-11.0.32+9 July 2026 CPU. Security issues fixed: - CVE-2026-41254: lcms: information disclosure and deni...
Amazon Linux 2 : python, --advisory ALAS2-2026-3845 (ALAS-2026-3845)
The version of python installed on the remote host is prior to 2.7.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3845 advisory. CR/LF bytes were not rejected by HTTP client proxy tunnel headers or host. CVE-2026-1502 The incremental HTML parser...
alloy-1.18.0-1.1 on GA media (moderate)
alloy-1.18.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11438-1 Rating: moderate Cross-References: CVE-2026-1229 CVE-2026-33814 CVE-2026-41506 CVE-2026-41606 CVE-2026-41607 CVSS scores: CVE-2026-1229 SUSE : 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L CVE-2026-1229 SUSE : 8.3...
Amazon Linux 2023 : bind, bind-chroot, bind-devel (ALAS2023-2026-2040)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2040 advisory. BIND may accept incorrect child-zone NSEC3 records as valid, which could allow an attacker to forge authenticated NXDOMAIN responses.This issue affects BIND 9 versions 9.18.0 through 9.18.50,...
Amazon Linux 2 : python-tornado, --advisory ALAS2-2026-3847 (ALAS-2026-3847)
The version of python-tornado installed on the remote host is prior to 4.2.1-3. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3847 advisory. Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.6, SimpleAsyncHTTPClient...