41142 matches found
CLSA-2026-1780361406 TuxCare security update for diff (2 CVEs)
TuxCare rebuilt diff to address 2 CVEs. Fixed in 4.0.2-tuxcare.1...
CLSA-2026-1779324473 TuxCare security update for postcss (4 CVEs)
TuxCare rebuilt postcss to address 4 CVEs. Fixed in 7.0.32-tuxcare.1...
CLSA-2026-1777077481 TuxCare security update for marked (1 CVE)
TuxCare rebuilt marked to address 1 CVE. Fixed in 4.0.6-tuxcare.1...
CLSA-2026-1776213255 TuxCare security update for 38 packages (3 CVEs)
TuxCare rebuilt 38 packages to address 3 CVEs. Fixed in 9.0.90-tuxcare.5...
CLSA-2026-1773360975 TuxCare security update for ms (17 CVEs)
TuxCare rebuilt ms to address 17 CVEs. Fixed in 0.3.0-tuxcare.1...
CLSA-2026-1773015264 TuxCare security update for semver (2 CVEs)
TuxCare rebuilt semver to address 2 CVEs. Fixed in 5.0.3-tuxcare.1...
CLSA-2026-1771978232 TuxCare security update for 38 packages (1 CVE)
TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.90-tuxcare.3...
CLSA-2025-1763597220 TuxCare security update for 38 packages (2 CVEs)
TuxCare rebuilt 38 packages to address 2 CVEs. Fixed in 9.0.50-tuxcare.1...
CLSA-2025-1765930090 TuxCare security update for 38 packages (9 CVEs)
TuxCare rebuilt 38 packages to address 9 CVEs. Fixed in 9.0.75-tuxcare.2...
CLSA-2025-1763338014 TuxCare security update for 38 packages (10 CVEs)
TuxCare rebuilt 38 packages to address 10 CVEs. Fixed in 9.0.90-tuxcare.1...
CLSA-2025-1766362095 TuxCare security update for 39 packages (12 CVEs)
TuxCare rebuilt 39 packages to address 12 CVEs. Fixed in 9.0.100-tuxcare.1...
CLSA-2024-1733443231 TuxCare security update for com.fasterxml.woodstox:woodstox-core (1 CVE)
TuxCare rebuilt com.fasterxml.woodstox:woodstox-core to address 1 CVE. Fixed in 5.0.3.tuxcare...
CVE-2026-67200 Perspective 5.0.0 Path Traversal via cwd_static_file_handler
Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files from the server filesystem by including literal ../ segments in HTTP request URL paths. Attackers can bypass the insufficient query-string-stripping sanitization to...
Denial Of Service (DoS)
nanoid is vulnerable to Denial Of Service. The vulnerability is due to an infinite loop in customAlphabet and customRandom when configured with a size of 0, allowing attacker-controlled input to hang the calling thread and cause application unavailability...
CVE-2026-14939
The Visualizer WordPress plugin is affected: versions before 4.0.6 expose a vulnerability where an attacker with Contributor-level access can supply a URL that is not validated to safe address ranges, enabling server-side requests (SSRF) to link-local instance-metadata endpoints. The fetched resp...
EUVD-2026-52571
A vulnerability was found in diaowen DWSurvey up to 6.14.0. Impacted is the function in DwDeisgnSurveyController.devSurvey. of the file /api/dwsurvey/app/v6/dw-design-survey/dev-survey.do of the component Survey Handler. The manipulation results in authorization bypass. The attack can be launched...
CVE-2026-6837
A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel WAX650S firmware versions through 7.10ABRM.4C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device...
Linux Distros Unpatched Vulnerability : CVE-2026-47781
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PDM is a Python package and dependency manager. In versions up to and including 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins...
Security update for ffmpeg-4 (important)
openSUSE security update: security update for ffmpeg-4 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21522-1 Rating: important References: bsc1272752 bsc1272754 bsc1272758 bsc1272765 bsc1272768 Cross-References: CVE-2026-64830 CVE-2026-64832...
