576 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel before version 6.0.3, the file drivers/gpu/drm/virtio/virtgpuobject.c misinterprets the return value of drmgemshmemgetsgtable. It expects the value to be NULL in the error case, but in reality, it is an error pointer...
Astra Linux – Vulnerability in WebKit2GTK
A port redirection issue has been resolved with additional port validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4, and iPadOS 14.4, as well as Safari 14.0.3. A malicious website may be able t...
CVE-2026-19017
Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when configured to use the Vault Connect CA provider with JWT or AppRole authentication. A privileged attacker with operator:write permission may direct Consul to read and forward...
CVE-2026-7557
An improper verification of cryptographic signature vulnerability in the SAML authentication module of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass authentication and impersonate any user, including administrators. This vulnerability affec...
CVE-2026-9192
An authentication bypass vulnerability in the ODBC App Server of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass password verification and execute queries with the privileges of any named user known to the server, including administrators...
EUVD-2026-53422
An improper privilege management vulnerability in the REST API document processing pipeline of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authenticated user with an administrative REST role to escalate privileges. This can result in unauthorized disclosure of sensitive server-si...
CLSA-2026-1783558975 TuxCare security update for 6 packages (10 CVEs)
TuxCare rebuilt 6 packages to address 10 CVEs. Fixed in 4.0.3-tuxcare.4...
CLSA-2026-1781571270 TuxCare security update for @angular (1 CVE)
TuxCare rebuilt 20 @angular packages to address 1 CVE. Fixed in 8.0.3-tuxcare.3...
CLSA-2026-1773015264 TuxCare security update for semver (1 CVE)
TuxCare rebuilt semver to address 1 CVE. Fixed in 5.0.3-tuxcare.1...
CLSA-2024-1733443231 TuxCare security update for com.fasterxml.woodstox:woodstox-core (1 CVE)
TuxCare rebuilt com.fasterxml.woodstox:woodstox-core to address 1 CVE. Fixed in 5.0.3.tuxcare...
CLEANSTART-2026-NL91750 Security fixes in argo-workflows 4.0.3-r0
Package argo-workflows version 4.0.3-r0 fixes 1 vulnerabilities: CVE-2026-33186...
CVE-2026-47768 nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL Referer, history, proxy logs. This issue has been patched in version 0.3.2...
Linux Distros Unpatched Vulnerability : CVE-2026-44228
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RT is an open source, enterprise-grade issue and ticket tracking system. Versions 6.0.0 and above, prior to 6.0.3, contain a stored Cross-Site Scripting XSS...
WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by VanTastic in WordPress Plugin Dokan Pro versions = 5.0.3...
Webform REST - Moderately critical - Access bypass - SA-CONTRIB-2026-087
This module enables you to retrieve and submit webform submissions via REST endpoints. The module doesn't sufficiently check the parent webform's permissions for creating, viewing and updating permissions. This vulnerability is mitigated by the fact that an attacker must already have permissions ...
CVE-2026-46983
Vulnerability in the Oracle Retail Integration Bus product of Oracle Retail Applications component: RIB Kernal. The supported version that is affected is 16.0.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Retail Integration...
CVE-2026-60331
...
CVE-2026-60304
CVE-2026-60304 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a low-privileged, network-accessible attacker (TCP) to cause a hang or repeatable crash (complete denial of service) in Or...