855 matches found
CVE-2022-29007
CVE-2022-29007...
PT-2026-99707
A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is possible to launch the attack remotely. Attacks of this...
Oracle Unified Directory OUD Core Full Control
The vulnerability of the OUD Core component of the Oracle Unified Directory application, a simplified deployment solution for the Oracle Fusion Middleware software platform, is related to the absence of authentication for a critical function. Exploiting this vulnerability could allow an attacker ...
CVE-2026-68348 ASoC: tas2781: bound firmware description string parsing
In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2781: bound firmware description string parsing The TAS2781 firmware parser reads several variable-length description strings with strlen before checking that the string terminator is present inside the firmware blob. A...
MINI-7QF7-XJPJ-V47F
Bulletin has no description...
ECHO-3F78-C63E-1F7C
Bulletin has no description...
ai-infra-nuclei
ai-infra-nuclei Templates nucleihttps://github.com/project...
BELL-CVE-2026-64274
Bulletin has no description...
MINI-C769-G2F6-RF66
Bulletin has no description...
CVE-2026-62430
Accesses to the CMOS memory contents are done using an indirect IO port pair. Therefore Xen needs to cache the guest chosen index, and one of the usages of the index didn't take the necessary locking to avoid concurrent changes. As a result, a guest could change the index after it being checked,...
Linux Distros Unpatched Vulnerability : CVE-2026-64212
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it In iwlmldremovelink, the link-fwid is saved at the beginning of the function so we have ...
Linux Distros Unpatched Vulnerability : CVE-2026-64287
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: arm64: Bound usedlrs when flushing the pKVM hyp vCPU flushhypvcpu copies the host vGIC state into the hyp's private vCPU on every run. The vGIC list regist...
MINI-MG53-QCGJ-6P2V
Bulletin has no description...
MINI-Q45G-JCX5-2XJ7
Bulletin has no description...
BELL-CVE-2026-59843
Bulletin has no description...
Malicious Package
Overview webquickauth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MINI-RMHM-48W4-C2C6
Bulletin has no description...
GHSA-8MV7-9C27-98VC Astro: composable `astro/hono` pipeline bypasses `security.checkOrigin` when `middleware()` is absent or misordered
Summary In the composable astro/hono pipeline, the security.checkOrigin protection is only installed by the middleware primitive. The actions and pages primitives each dispatch to user code independently, so a pipeline that mounts either primitive before or without middleware will bypass the orig...
OPENSUSE-SU-2026:21371-1 Security update for gzip
This update for gzip fixes the following issue - CVE-2026-41991: insecure temporary file handling in the gzexe utility when the mktemp utility is not available in the user's PATH bsc1269622...