6914 matches found
Rocky Linux 9 [CIQ] Security Update: varnish / varnish-devel / varnish-docs (crlsa-2024_1691)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20241691 advisory. varnish: HTTP/2 Broken Window Attack may result in denial of service CVE-2024-30156 Tenable has extracted the preceding description block directly from the CIQ...
Rocky Linux 9 [CIQ] Security Update: tigervnc / tigervnc-debuginfo / tigervnc-debugsource / etc (crlsa-2023_1592)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20231592 advisory. xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege Escalation Vulnerability CVE-2023-1393 Tenable has extracted the preceding description...
Rocky Linux 8 [CIQ] Security Update: lemon / lemon-debuginfo / sqlite / sqlite-debuginfo / etc (crlsa-2023_3840)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20233840 advisory. sqlite: Crash due to misuse of window functions. CVE-2020-24736 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...
CVE-2026-102110
A Kiteworks appliance is vulnerable to a missing authentication flaw in a setup function used during initial activation . An unauthenticated network attacker can repeatedly re-trigger the privileged activation process during this specific window because the endpoint fails to enforce intended stat...
Denial Of Service
Apache Qpid Proton-J is vulnerable to Denial of Service. The vulnerability is due to insufficient validation of the session flow control incoming window, where an authenticated attacker can exceed the incoming window size and potentially cause denial of service...
[SECURITY] Fedora 45 Update: mutter-51.0-1.fc45
Mutter is a window and compositing manager that displays and manages your desktop via OpenGL. Mutter combines a sophisticated display engine using the Clutter toolkit with solid window-management logic inherited from the Metacity window manager. While Mutter can be used stand-alone, it is primari...
Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions
Impact Windows opened from a sandboxed top-level document did not inherit that document's HTML sandbox restrictions, so content that was meant to run sandboxed could open a window with the app's full origin. GHSA-hq2x-r82h-9wj4 covers the same issue for sandboxed iframes. Apps are only affected i...
Insecure Default Initialization of Resource
Overview electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Insecure Default Initialization of Resource via the webpreferences attribute on a tag, which omitted nodeIntegrationInWorke...
CVE-2026-102674
The Electron framework (prior to versions 41.10.6 , 42.9.2 , 43.4.1 , and 44.0.0-beta.5 ) contains a vulnerability where windows opened from a sandboxed top-level document fail to inherit the document's active HTML sandbox restrictions . This allows untrusted content in a sandboxed document to op...
Does the Unsafe Gradient Survive a Conversation? on the Fragility of Gradient-Based Jailbreak Detection in Multi-Turn Dialogue
Safety-aligned language models are commonly deployed as multi-turn assistants, which lets adversaries spread unsafe intent across several user turns instead of a single prompt. Gradient-based jailbreak detectors such as GradSafe were developed for single prompts: they score an input by the...
CVE-2026-102674: Incorrect Privilege Assignment
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 41.10.6, 42.9.2, 43.4.1, and 44.0.0-beta.5, windows opened from a sandboxed top-level document did not inherit that document's active HTML sandbox restrictions. Untrusted content in a...
GO-2026-6537 nginx ignition has TOTP Reuse During Validity Window in github.com/lucasdillmann/nginx-ignition
nginx ignition has TOTP Reuse During Validity Window in github.com/lucasdillmann/nginx-ignition...
CVE-2026-94285
A flaw was found in libX11. An out-of-bounds read vulnerability in the byte-oriented codeset parser allows a malicious X Window System server to cause a Denial of Service DoS by crashing connected client applications. This issue may also allow the server to access limited memory contents from the...
[SECURITY] Fedora 45 Update: muffin-6.7.8^unstable-1.fc45
Muffin is a window and compositing manager that displays and manages your desktop via OpenGL. Muffin combines a sophisticated display engine using the Clutter toolkit with solid window-management logic inherited from the Metacity window manager. Muffin is very extensible via plugins, which are us...
PT-2026-107771
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=566549189 Crash type: Heap-buffer-overflow READ 1 Crash state: screen resize cursor window pane resize layout fix panes...
CVE-2026-85081
The File Manager WordPress plugin before 8.0.5, FileOrganizer WordPress plugin before 1.2.1, File Manager Pro WordPress plugin before 2.1.3 do not correctly validate the origin of window messages received by the file browser they load on their admin screens, accepting any origin that is a leading...
CVE-2026-85081
Multiple WordPress plugins—File Manager (before 8.0.5), FileOrganizer (before 1.2.1), and File Manager Pro (before 2.1.3)—are vulnerable to a DOM-based XSS due to improper validation of postMessage origins. The flaw exists in the bundled file-manager library (versions below 2.1.70), where the app...
Linux Distros Unpatched Vulnerability : CVE-2026-93799
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: mvm: validate staid in BA window status notif BAWINDOWSTATUSNOTIFICATIONID extracts a 5-bit staid from the firmware notification and uses it to...